Vulnerability News

The Black Basta ransomware gang may have exploited a Windows privilege escalation vulnerability as a zero-day before it was patched,...

A security researcher discovered an exploitable timing leak in the Kyber key encapsulation mechanism (KEM) that’s in the process of...

The U.S. National Institute of Standards and Technology (NIST) has taken a big step to address the growing backlog of...

Carrier has issued a serious product security advisory confirming the existence of several vulnerabilities in its LenelS2 NetBox access control...

Check Point researchers have observed a surge in threat actor groups targeting remote-access VPN environments as an entry point for...

Google released a new Chrome update on Thursday to fix the fourth zero-day vulnerability in two weeks and eighth overall...

Thousands of GitHub Enterprise Server (GHES) instances in the United States using SAML single sign-on (SSO) authentication are at high...

Microsoft patched a zero-day vulnerability exploited by attackers to distribute QakBot and other malware payloads on susceptible Windows systems. Identified...

A threat actor has surfaced on the dark web, announcing the creation of "Hell Paradise," a covert online platform purportedly...

In the ongoing debate concerning the ethics of vulnerability disclosure, Czech software giant JetBrains has taken a firm stance against...