AI Red-Team Tools Let Attackers Hijack Operator Machines
A peer-reviewed security audit has exposed critical...
ManageEngine AD360 SSO Bug Lets Attackers Hijack User Accounts
A high-severity vulnerability tracked as CVE-2026-11374 has...
Chrome 149 Security Patch: Use-After-Free Bugs in WebGL, Autofill, and Blink Fixed
Google has pushed a significant security update to...
Cisco Unified CM SSRF Flaw Lets Attackers Gain Root Access
Cisco has disclosed a critical Server-Side Request Forgery...
Critical Webmin Stored XSS Vulnerability Lets Untrusted Users Compromise Root-Level Access
A critical stored cross-site scripting (XSS) vulnerability...
PoC Exploit Released for Microsoft Exchange SSRF Vulnerability — Patch Now
A proof-of-concept (PoC) exploit has been publicly released...
Grafana Confirms TanStack npm Supply Chain Attack Contained
Grafana Labs has published a comprehensive post-incident...
Critical DifyTap Flaws Let Attackers Silently Wiretap AI Conversations on Dify’s 1M-App Platform
Four newly identified vulnerabilities in Dify, the...
Apple Fixes High-Severity Beats Bluetooth Eavesdropping Flaw
Apple has released Beats Firmware Update 1B211 to address a...
Fortinet Warns of FortiBleed Credential Attacks on FortiGate
Fortinet has issued an urgent security advisory warning...