vulnerabilities

Microsoft warns that the Russian APT28 threat group exploits a Windows Print Spooler vulnerability to escalate privileges and steal credentials and data using a previously unknown…

Threat actors are actively exploiting critical vulnerabilities in OpenMetadata to gain unauthorized access to Kubernetes workloads and leverage them for cryptocurrency mining activity. OpenMetadata is an…

Attackers are now actively targeting over 92,000 end-of-life D-Link Network Attached Storage (NAS) devices exposed online and unpatched against a critical remote code execution (RCE) zero-day…

Balada Injector malware infected over 7100 WordPress sites using a vulnerable version of the Popup Builder WordPress plugin.

Users of ExpressVPN versions 12.23.1 to 12.72.0 on Windows should upgrade their client to the latest version, 12.73.0.

The newly fixed flaw tracked as CVE-2024-23832 allows attackers to impersonate users and take over accounts.

Exploit code is now available for a critical authentication bypass vulnerability in Fortra's GoAnywhere MFT (Managed File Transfer) software which allows attackers to create new admin…

Cybersecurity researchers are warning of a rise in attacks exploiting a now-patched flaw in Apache ActiveMQ to deliver a malicious code that borrows the code from…

GitHub has rotated some keys in response to a security vulnerability that could be potentially exploited by attackers to gain access to credentials within production containers…

Over 1700 devices are already compromised.