Executive Overview Over the past week, global threat activity has highlighted a critical reality: modern cyber attacks are faster, more coordinated, and increasingly industrialized. From mass ...

MongoDB has warned IT admins to immediately patch a high-severity vulnerability that can be exploited in remote code ...

At the core of every AI coding agent is a technology called a large language model (LLM), which is a type of neural network ...

Critical n8n flaw CVE-2025-68613 (CVSS 9.9) lets authenticated users run arbitrary code; versions 0.211.0–1.120.4 affected, ...

Hewlett Packard Enterprise (HPE) has patched a maximum-severity vulnerability in its HPE OneView software that enables ...

Attackers are exploiting a Flight protocol validation failure that allows them to execute arbitrary code without ...

New React bug that can drain all your tokens is impacting 'thousands' of websites Ripple Expands $1.3B RLUSD Stablecoin to ...

In early December 2025, the React core team disclosed two new vulnerabilities affecting React Server Components (RSC). These issues – Denial-of-Service and Source Code Exposure were found by security ...

Two Apple zero-day vulnerabilities discovered this month have overlap with another mysterious zero-day flaw Google patched ...

“Users should urgently update all their impacted Apple devices,” James Maude from BeyondTrust warns. “Even though this only ...

In the remote maintenance software Connectwise ScreenConnect, authenticated attackers can inject malicious code. An update is available.

Threat actors have exploited a zero-day vulnerability in the Gogs self-hosted Git service to compromise over 700 internet-exposed instances.