CERT/CC has disclosed a critical authentication backdoor affecting multiple Tenda router firmware versions. Tracked as ...

IBM, Red Hat, and Deloitte announce Lightwell collaboration to help strengthen open source software supply chain trust ...

BeyondTrust warned customers to patch two critical security flaws in its Remote Support (RS) and Privileged Remote Access ...

The unpatched vulnerability could give attackers a pathway from a compromised pod to broader control over Kubernetes ...

At the same time, many smaller organizations know the risk is real but feel stretched thin. According to research from ...

OS 26.5.2 security update arrives weeks early as Apple adapts to AI tools that compress vulnerability discovery into hours.

Over the years, multiple studies have shown that critical flaws persist in container images: from unpatched software, insecure configurations, and other lapses. Insecure and outdated container images ...

The U.S. Cybersecurity and Infrastructure Security Agency ordered all Federal Civilian Executive Branch agencies on Thursday to patch a maximum-severity vulnerability in Ivanti Sentry within three ...

ShinyHunters exploited an unpatched Oracle PeopleSoft zero-day (CVE-2026-35273, CVSS 9.8) to breach 100+ organisations. Two-thirds are universities. No patch yet. Oracle warned customers on Thursday ...

The tech giant warned of a security flaw that a cybercrime gang said it's exploiting as part of a mass-hacking campaign. Google said it notified more than 100 organizations that had potentially ...

Microsoft published a blog post criticizing the researcher, who goes by the handle “Nightmare Eclipse,” for publicly disclosing a series of bugs, including BlueHammer, RedSun, UnDefend, and YellowKey.

The anonymous security researcher going by the name Chaotic Eclipse (aka Nightmare-Eclipse) has released a proof-of-concept (PoC) exploit for yet another Microsoft Defender zero-day named RoguePlanet.