CISA adds exploited iCagenda and Balbooa Forms flaws to KEV after reported zero-day attacks enabled PHP uploads and remote ...

Zimbra fixes a critical stored XSS flaw in its Classic Web Client that could let crafted emails run malicious scripts when ...

Six vulnerabilities in the widely used U-Boot bootloader have been discovered that could allow attackers to execute malicious ...

A newly-disclosed exploit in Claude Code’s ‘auto-mode’ leaves developers facing remote code execution (RCE) vulnerabilities ...

Hackers are exploiting a critical vulnerability (CVE-2026-48282) in Adobe ColdFusion that carries a CVSS score of 10/10.

Progress has told ShareFile customers to shut down Storage Zone Controller servers due to a credible security threat.

Researchers at the AI Now Institute developed a proof-of-concept exploit showing common AI tools used for security could ...

Multiple Juniper Junos OS security vulnerabilities expose networks to remote code execution, DoS, and data theft, urging ...

Ethereum gossipsub vulnerability CVE-2026-34219 lets any unauthenticated peer crash a validator with a single crafted PRUNE ...

Security researchers have disclosed a proof-of-concept exploit capable of obtaining root access on Android 17 by combining ...

A critical vulnerability dubbed Januscape patched in the Linux kernel-based virtualization module poses arbitrary code execution risk to multi-tenant cloud environments and virtualized enterprise ...

As Google releases yet another Chrome security update, here’s what you need to know about use-after-free flaws.