vulnerability

Critical ASUSTOR Vulnerability Let Attackers Execute Malicious Code with Elevated Privileges

A critical security vulnerability has been discovered in ASUSTOR backup and synchronization software, allowing attackers to execute malicious code with…

4 minutes ago

SonicOS SSLVPN Vulnerability Let Attackers Crash the Firewall Remotely

SonicWall has disclosed a critical stack-based buffer overflow vulnerability in its SonicOS SSLVPN service. That allows remote unauthenticated attackers to…

4 hours ago

Hackers Actively Exploiting 7-Zip RCE Vulnerability in the Wild

Hackers have begun actively exploiting a critical remote code execution (RCE) vulnerability in the popular file archiver 7-Zip, putting millions…

2 days ago

Massive Hacking Operation WrtHug Compromises Thousands of ASUS Routers Worldwide

A sophisticated cyber campaign known as Operation WrtHug has hijacked tens of thousands of ASUS WRT routers globally, turning them…

2 days ago

Microsoft Investigating Copilot Issue On Processing Files

Microsoft has launched an investigation into a widespread issue affecting Microsoft Copilot in Microsoft 365, where users are experiencing significant…

2 days ago

New FortiWeb 0-Day Command Injection Vulnerability Exploited in the Wild

Fortinet has released an urgent security advisory addressing a newly discovered zero-day vulnerability, CVE-2025-58034, in its FortiWeb web application firewall…

2 days ago

W3 Total Cache Command Injection Vulnerability Exposes 1 Million WordPress Sites to RCE Attacks

A critical command injection vulnerability has been discovered in the W3 Total Cache plugin, one of WordPress's most popular caching solutions used…

3 days ago

CISA Warns of Critical Lynx+ Gateway Vulnerability Exposes Data in Cleartext

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical warning about a severe vulnerability in Lynx+ Gateway devices…

3 days ago

Chrome Type Confusion Zero-Day Vulnerability Actively Exploited in the Wild

Google has rushed out a critical update for its Chrome browser to address a zero-day vulnerability actively exploited in the…

3 days ago

New MobileGestalt Exploit for iOS 26.0.1 Enables Unauthorized Writes to Protected Data

A sandbox escape vulnerability affecting iPhones and iPads running iOS 16.2 beta 1 or earlier versions. The proof-of-concept (POC) exploits…

4 days ago