Vulnerabilities

Semiconductor and software design company Arm warns of an actively exploited zero-day vulnerability tracked as CVE-2024-4610, in Mali GPU Kernel Driver. The vulnerability is a use-after-free…

Google has released a new emergency Chrome security update to address the third zero-day vulnerability exploited in attacks within a week. Google is aware that an…

A vulnerability in the WordPress Automatic plugin is being exploited to inject backdoors and web shells into websites.

Microsoft warns that the Russian APT28 threat group exploits a Windows Print Spooler vulnerability to escalate privileges and steal credentials and data using a previously unknown…

Attackers are now actively targeting over 92,000 end-of-life D-Link Network Attached Storage (NAS) devices exposed online and unpatched against a critical remote code execution (RCE) zero-day…

Balada Injector malware infected over 7100 WordPress sites using a vulnerable version of the Popup Builder WordPress plugin.

Users of ExpressVPN versions 12.23.1 to 12.72.0 on Windows should upgrade their client to the latest version, 12.73.0.

The newly fixed flaw tracked as CVE-2024-23832 allows attackers to impersonate users and take over accounts.

Exploit code is now available for a critical authentication bypass vulnerability in Fortra's GoAnywhere MFT (Managed File Transfer) software which allows attackers to create new admin…

Cybersecurity researchers are warning of a rise in attacks exploiting a now-patched flaw in Apache ActiveMQ to deliver a malicious code that borrows the code from…