Cyber Attacks
View all
GenAI Powers Ransomware: Faster Social Engineering and Data Discovery
Zscaler research finds attackers use generative AI to craft convincing phishing lures and rapidly locate sensitive data for theft or encryption.
Cloud Security
View all
Vulnerabilities
View all
Vulnerabilities
aws-smithy-json Uncontrolled Recursion Enables Remote DoS; Patch to 0.62.7 Required
Uncontrolled recursion in the aws-smithy-json crate allows attackers to crash servers via small, deeply nested JSON requests.
Vulnerabilities
Fleet DM Gzip Decompression Flaw Triggers Memory Exhaustion Denial of Service
Unauthenticated attackers can crash Fleet instances by sending compressed requests that expand to consume all available server memory.
Vulnerabilities
ZoneMinder Command Injection via Export Function in Versions Before 1.38.3
Authenticated users can execute arbitrary OS commands in ZoneMinder by manipulating the export file parameter, a flaw rated high severity.
Vulnerabilities
Dockhand 1.0.34 Patches Unauthenticated RCE in Container Terminal Endpoint
An auth bypass in Dockhand’s WebSocket terminal allows unauthenticated command execution, fixed in version 1.0.34.
Data Breaches
View all
Data Breaches
Data Classification Mistakes That Expose Your Infrastructure
Data Breaches
Credit Freezes: 6 Common Misunderstandings That Leave You Exposed
Data Breaches
Email Account Compromise Prevention Checklist for Secure Operations
Data Breaches
Password reuse is a security risk: how to break the chain
Latest news
Vulnerabilities
FBI and Task Force Seize Meth in NY as Russian National Faces Historic Extradition
Federal authorities announce coordinated law enforcement actions involving drug seizures and international legal proceedings in New York.
Vulnerabilities
Apache Answer Stored XSS in Imports Bypasses Markdown Sanitization Through v2.0.2
A low-severity flaw allows unsanitized HTML to persist in imported questions, bypassing standard security filters in Apache Answer installations.
Vulnerabilities
TSG Profleet SQL Injection in Index Endpoint Risks Database Manipulation
A critical SQL injection flaw in TSG Profleet allows attackers to manipulate database records via a specific CGI parameter before a defined date.
Vulnerabilities
My Calendar plugin allows unauthenticated remote code execution via shortcode injection
A critical flaw in the My Calendar WordPress plugin lets attackers overwrite admin credentials and seize full control without logging in.
Vulnerabilities
FileRise Proxy Auth Bypass Lets Attackers Impersonate Admins Without Credentials
Unpatched FileRise instances trusting reverse-proxy headers allow unauthenticated users to hijack admin sessions if the backend port is directly reachable.
Vulnerabilities
Eclipse Vert.x WebSocket Decompression Flaw Enables Zip Bomb Denial of Service
Unbounded memory allocation in WebSocket decompression allows attackers to trigger denial of service via zip bomb payloads in specific versions.
Vulnerabilities
VPN Appliance Vulnerabilities: How Hidden Flaws Compromise Your Privacy
Your remote connection relies on complex software that often contains unpatched flaws, turning your trusted privacy tunnel into a visible corridor for attackers.
Vulnerabilities
Cisco IOS XE Vulnerabilities Explained Simply
Network software flaws allow attackers to bypass security controls without breaking physical locks, exposing data flows to interception or disruption.