Cisco has warned that threat actors are already exploiting a critical vulnerability in its widely deployed products, one that enables a complete takeover of affected systems, and that no patch was available at the...
Arctic Wolf reports the first confirmed intrusions into customer networks in which attackers logged into FortiGate devices via FortiCloud SSO shortly after the disclosure of two critical authentication-bypass vulnerabilities—CVE-2025-59718 and CVE-2025-59719. According to the...
Cymulate Research Labs has uncovered a local privilege escalation vulnerability in Microsoft Windows Admin Center (WAC) version 2.4.2.1, affecting all WAC installations up to version 2411. The issue stems not from an obscure logic...
One of the key defensive barriers against the creation of fake online accounts has proven alarmingly fragile—capable of being bypassed for just a few cents. Researchers at the University of Cambridge have found that...
Freedom Chat, an application marketed as a secure messaging platform, has been exposed to serious risk following the discovery of two critical vulnerabilities. Despite assurances of data privacy—including the concealment of users’ phone numbers—researchers...
A critical vulnerability in the widely used JavaScript library React, dubbed React2Shell, is already being exploited at scale. According to Google, at least five newly identified Chinese espionage groups, “Iran-linked” threat actors, and common...
A tool has been released into the public domain that enables covert monitoring of user activity on WhatsApp and Signal using nothing more than a phone number. This surveillance technique spans more than three...
Apple has released out-of-band patches addressing two zero-day vulnerabilities that were already being exploited in real-world attacks. The company confirmed that the exploits involved highly sophisticated technical techniques targeting a limited set of individuals,...
The 0patch team has reported that while analyzing CVE-2025-59230 in the Windows Remote Access Connection Manager (RasMan)—a flaw Microsoft addressed with its October 2025 updates—researchers uncovered a working exploit that enables local code execution...
The long-running React2Shell saga—which has continued to disrupt many web projects—has taken another turn: it has emerged that the original fix was incomplete. A deeper review uncovered two additional vulnerabilities in the React Server...