Samsung's bloatware carried dangerous flaws that enabled access to the phone's microphone and camera.

Adobe patches CVE-2026-48449, a CVSS 10.0 Campaign Classic flaw that could allow code execution without user interaction, ...

CISA adds Progress Kemp LoadMaster CVE-2026-8037 to KEV after active exploitation reports, with 792 attempts logged across 65 ...

CISA urges federal agencies to immediately patch CVE-2026-8037, an exploited remote code execution flaw in Progress ...

JetBrains products are widely used by software developers and DevOps teams to build, test, and deploy applications. Because these tools often have access to source code, build pipelines, credentials, ...

Cisco warns that its Secure Endpoint Connector products are affected by ClamAV DoS vulnerabilities with public PoC.

The vulnerability abuses Active Storage, allowing unauthenticated attackers to read sensitive files and potentially take over ...

Thirteen critical vulnerabilities have been found in the vm2 JavaScript sandbox package that could allow an attacker’s code to escape the container and do nasty things to IT environments. As a result, ...

A critical vulnerability (CVE-2025-20337) in Cisco's Identity Services Engine (ISE) could be exploited to let an unauthenticated attacker store malicious files, execute arbitrary code, or gain root ...

PandasAI, an open source project by SinaptikAI, has been found vulnerable to Prompt Injection attacks. An attacker with access to the chat prompt can craft malicious input that is interpreted as code, ...

Apple’s latest update is security-heavy ...