Latest Cyber Security News

A critical security flaw in the Active Storage component of the Ruby on Rails web framework has been disclosed, allowing […]

Emergency security updates have been distributed for a widely deployed web community software platform following the public disclosure of a

A critical access control vulnerability residing within an enterprise firewall management platform has been formally added to the federal catalog

Active cyber espionage campaigns targeting enterprise email infrastructure have been uncovered, leveraging specialized web client vulnerabilities to deploy persistent backdoors.

Threat monitoring arrays report accelerated automated scanning probing on-premises software defined networking orchestrators for an unauthenticated command injection defect. The

Emergency software updates have been distributed across mobile and desktop operating system runtimes to patch zero-day vulnerabilities undergoing active exploitation.

A detailed technical breakdown and functional proof of concept code have been published for a critical authentication bypass flaw impacting

A critical local privilege escalation flaw residing within the XFS storage subsystem of the Linux kernel has been detailed alongside

A specialized social engineering campaign targeting corporate users has been uncovered, using fraudulent collaboration software landing pages to distribute legitimate

Active wild exploitation targeting an unpatched remote code execution vulnerability in a widely integrated Java JSON parsing library continues to