CISA warns of active exploitation of critical FortiSandbox root-access flaws. Federal agencies ordered to patch or isolate ...

FortiSandbox vulnerability exploits allow unauthenticated root access to the appliance that issues security verdicts across ...

A SimpleHelp authentication flaw is being exploited to deploy Djinn Stealer, a cross-platform malware targeting cloud, developer, and AI credentials.

Security researchers have identified more than 236,000 websites running pre-built templates designed to drain cryptocurrency ...

Public exploits have been released for the critical "wp2shell" remote code execution vulnerabilities affecting WordPress Core ...

Threat actors are exploiting CVE-2026-58644, a Microsoft SharePoint RCE vulnerability patched on the July 2026 Patch Tuesday.

CISA added CVE-2026-48939 and CVE-2026-56291 to its Known Exploited Vulnerabilities catalog after automated attackers ...

Three actively exploited SharePoint vulnerabilities have landed in the KEV catalog, with security experts warning that ...

Zoom is warning of a critical vulnerability in its desktop client and software development kit for Windows that could be ...

Researchers disclosed usbliter8, a SecureROM exploit affecting older Apple devices that can bypass boot protections with physical access. Researchers at cybersecurity firm Paradigm Shift have revealed ...

A decades-old Unix symlink trick fools six AI coding assistants, including Claude Code, into writing SSH keys and shell ...