Static AES keys are enabling attackers to decrypt access tokens and reach remote code execution, triggering urgent patch ...

Research shows a .NET proxy design flaw enables file writes and RCE through attacker-supplied WSDL in multiple products.

Over the weekend, ​Google's threat intelligence team linked five more Chinese hacking groups to attacks exploiting the ...

React vulnerability CVE-2025-55182 exploited by crypto-drainers to execute remote code and steal funds from affected websites ...

Tens of thousands of users have installed GhostPoster Firefox extensions, which rely on steganography to hide malware in ...

Huntress reports active attacks abusing Gladinet’s fixed cryptographic keys to forge tickets and gain remote code execution ...

An unpatched zero-day vulnerability in Gogs, a popular self-hosted Git service, has enabled attackers to gain remote code ...

SEAL Security researchers warned that a critical React flaw fueled a surge in wallet-draining attacks on crypto websites.

In the remote maintenance software Connectwise ScreenConnect, authenticated attackers can inject malicious code. An update is ...

In early December 2025, the React core team disclosed two new vulnerabilities affecting React Server Components (RSC). These issues – Denial-of-Service and Source Code Exposure were found by security ...

Threat actors have exploited a zero-day vulnerability in the Gogs self-hosted Git service to compromise over 700 ...

KB5072033 addresses vulnerabilities across Windows systems and Office applications—including one actively exploited zero-day.