
Cyber Attacks
View all
NodeZero and Torq Auto-Remediate Exploit Paths in Network, Cloud, and Identity
A new joint solution connects autonomous pentesting findings with SOC workflows to close proven exploit paths and verify fixes automatically.
Cloud Security
View allVulnerabilities
View all
Godot 4.x Radiance HDR loader heap out-of-bounds write disputed
A CVE has been assigned for a heap out-of-bounds write in Godot 4.x, though the vendor disputes its security relevance and MITRE scored it low.

Chrome Zero-Day Vulnerabilities: Detection, Exploitation and Mitigation
Zero-day exploits in Chrome often bypass standard signature scanning because they abuse legitimate browser mechanisms rather than injecting known malicious code patterns.

Hardcoded Secrets in Source Code: Risks and Protection for Small Businesses
Hardcoded secrets remain active until code is rebuilt, creating a permanent breach vector that survives every subsequent security patch and configuration change.

Prevent JWT vulnerabilities with these 5 priority controls
Relying on signature verification alone leaves your systems open to algorithm confusion attacks that bypass authentication entirely.
Data Breaches
View all
Data Classification Mistakes That Expose Your Infrastructure

Credit Freezes: 6 Common Misunderstandings That Leave You Exposed

Email Account Compromise Prevention Checklist for Secure Operations

Password reuse is a security risk: how to break the chain
Latest news
Vulnerabilities
joserfc 1.7.4 Fixes Critical Signature Bypass in Python Library
A flaw in joserfc allows unauthenticated payloads to pass verification in versions before 1.7.4, requiring immediate updates for affected Python applications.
Vulnerabilities
IoT Device Patching: 9 Practices to Close Critical Gaps
Firmware updates often reset local configurations, forcing teams to rebuild access controls and network policies after every security fix.
Vulnerabilities
s2n-quic CRYPTO Reassembly Flaw CVE-2026-10740 Triggers Unauthenticated Memory Exhaustion Before 1.82.0
A flaw in the CRYPTO frame reassembler allows attackers to exhaust server memory without authentication, requiring an upgrade to version 1.82.0 for remediation.
Vulnerabilities
Prevent Unsafe YAML Deserialization: A Security Operations Checklist
YAML parsers often execute code hidden in data structures, turning configuration files into remote execution vectors that bypass standard application firewalls.
Vulnerabilities
Eclipse EthereumAuthenticator Authentication Bypass via Substring Match
A critical flaw in Eclipse EthereumAuthenticator allows unauthenticated access to protected resources if request paths contain the login string.
Vulnerabilities
Command Injection Risk in AWS Bedrock AgentCore Python SDK Install Routine
Unsanitised arguments in the package installer could let authenticated users run arbitrary code inside the managed sandbox environment.
Vulnerabilities
s2n-tls v1.7.6 fixes silent TLS 1.3 data stripping and QUIC handshake memory leaks
AWS fixes silent data stripping in TLS 1.3 and a memory leak in QUIC handshakes within the s2n-tls library.
Vulnerabilities
Omnispace Agora Critical Flaw: SHA-1 Hash Enables Account Hijack in Versions Before 26.10.0
Unauthenticated attackers can hijack accounts in Omnispace Agora before version 26.10.0 by computing deterministic password-reset tokens.







