Edouard Bochin and Tao Yan from Palo Alto Networks have been credited with finding and reporting CVE-2025-4918. The discovery ...

Continuing on API client security, we cover more sandbox bypasses, this time in Bruno and Hoppscotch, as well as JavaScript ...

If you're a Firefox user, you need to update your browser. Mozilla has released a security patch for two zero-day ...

A Russia-linked threat actor has been attributed to a cyber espionage operation targeting webmail servers such as Roundcube, ...

SAP NetWeaver flaw drew hackers, zero days in Ivanti EPMM, DOGE employee’s credentials found in infostealer dumps and Nucor ...

Developers adept at multiple coding languages are tricked into installing a familiar-sounding package from within the Node ...

The group uses legitimate messaging services and job platforms to apply for real jobs using fake malicious resumés that drop ...

In this post, we analyze an open-source CAPTCHA solver designed to bypass a custom challenge deployed on Binance, one of the ...

A critical vulnerability in a WordPress scraper autoblogging plugin allows unauthorized users to upload malicious files to ...

Russia-linked APT Star Blizzard is using the ClickFix technique in recent attacks distributing the LostKeys malware.