Unauthorized access incidents at Japanese organizations leaked personal data via known flaws, Metabase SQL injection, API ...

Japanese web systems face rising data leaks as attackers exploit API flaws, weak authentication, and software vulnerabilities ...

Adception abuses Google ads, Bing redirects, compromised sites, and clipboard manipulation to deliver malicious payloads to ...

Fake event invitations lead victims through RSVP and CAPTCHA pages to install a RAT, enabling attackers to remotely control ...

Node.js has released security updates addressing CVE-2026-111497, a high-severity vulnerability in its bundled Brotli decompression code that can potentially enable remote code execution. The flaw is ...

Just as organizations were working to patch the Microsoft Office zero-day (CVE-2026-21509), the cybersecurity world is confronted with another serious threat. OpenSSL disclosed a high-severity stack ...

Microsoft has patched CVE-2026-96951, a high-severity Windows Shell security feature bypass vulnerability that is already being exploited in real-world attacks. The flaw carries a CVSS score of 8.8 ...

CVE-2026-48095 in 7-Zip has raised fresh concerns around malicious archive handling and user-driven exploitation. According to GitHub Security Lab, the flaw is a heap buffer write overflow in 7-Zip’s ...

GitLab has released emergency security updates addressing CVE-2026-97229, a maximum-severity remote code execution vulnerability affecting GitLab Community Edition (CE) and Enterprise Edition (EE).

Siemens has confirmed active exploitation of a high-severity DLL side-loading vulnerability in Siemens Software Center, a desktop application used to download, install, activate, and update Siemens ...

Every day, threat intelligence teams read reports describing new attacker campaigns, and every day detection engineers face the same question: how do we turn this into detection content before the ...

Threat actors are exploiting a critical authentication bypass flaw in Palo Alto Networks GlobalProtect to obtain initial access. After entering the environment, the attackers deploy Qilin ransomware, ...