Third time’s the charm?’ asks a prominent security researcher after what appears to be the same critical Java deserialization ...

Microsoft September 2025 Patch Tuesday fixes 81 vulnerabilities including two zero-days in Windows SMB Server and SQL Server, ...

Libraesva rolled out an emergency update for its Email Security Gateway solution to fix a vulnerability exploited by threat ...

Then in October 2024, SolarWinds disclosed and tried to patch CVE-2024-28988, another 9.8-rated Web Help Desk Java ...

Security researchers report that OnePlus smartphone users remain vulnerable to a critical bug that allows any application to ...

In mid-October 2024, on the same day the US cybersecurity agency CISA warned that the hardcoded credentials had been ...

A newly-uncovered RCE flaw in SolarWinds' helpdesk product bypasses two previously-issued fixes, and users should prioritise ...

CISA has revealed that attackers breached the network of an unnamed U.S. federal civilian executive branch (FCEB) agency last ...

The vulnerability, tracked as CVE-2025-26399 (CVSS score: 9.8), has been described as an instance of deserialization of ...

Researchers warn organizations to immediately upgrade deployments of GoAnywhere MFT due to vulnerabilities that have been ...

A Chrome flaw in the V8 engine, CVE-2025-10585, let hackers execute code for wallet drains and private key thefts. Google ...

CISA details attackers exploiting Ivanti EPMM zero-days CVE-2025-4427/4428 in May 2025, enabling persistent remote code ...