It's been around for 14 years, and at least one of the newly disclosed bugs, a path-traversal flaw now tracked as CVE ...

ShadowPad malware is being delivered through an actively exploited WSUS vulnerability, granting attackers full system access.

CERT-In has issued a high-severity advisory warning users about a remote code execution flaw in Google Chrome for desktop, ...

Threat actors are exploiting a recently patched 7-Zip vulnerability that leads to remote code execution (RCE), NHS England ...

Windows Server 2025 is currently open to a Remote Code Execution exploit via the Windows Update Service, and at the time of this writing a fix from Microsoft has yet to fully patch the issue. Reports ...

A recently patched Oracle Identity Manager vulnerability tracked as CVE-2025-61757 may have been exploited as a zero-day.

The exploitation of CVE-2025-61757 follows a breach of Oracle Cloud earlier this year and a extortion campaign against Oracle ...

Chinese state-sponsored threat actors are reportedly actively exploiting a vulnerability in the Microsoft Windows Server ...

D-Link is warning of three remotely exploitable command execution vulnerabilities that affect all models and hardware ...

The critical pre-authentication RCE flaw is added to CISA’s KEV catalog, with a warning for federal civilian agencies to ...

Threat actors were exploiting vulnerable versions of Triofox after a patched version was released, said Google Cloud ...

Attackers are exploiting a security vulnerability in 7-Zip that allows them to inject and execute malicious code.