CISA details China-linked BRICKSTORM malware that enables persistent, stealthy access in VMware and Windows systems.

Sophos reports STAC6565 targeting nearly 40 victims, with 80% of attacks hitting Canadian firms and involving QWCrypt ...

Federal agencies told to fix critical XXE vulnerability (CVE-2025-58360) in GeoServer after attackers gain a head start.

A flaw in JumpCloud Remote Assist for Windows has exposed managed endpoints to local privilege escalation and ...

Windows Server issue was fixed roughly a month ago, so make sure you update now.

A critical flaw in the W3 Total Cache (W3TC) WordPress plugin can be exploited to run PHP commands on the server by posting a comment that contains a malicious payload. The vulnerability, tracked as ...

An emergency patch from Google was rushed out so quickly that the vulnerability doesn't yet have an official CVE number.

High-severity Windows kernel race condition can let low-privilege local users gain full admin rights. Exploit requires local access (compromised account or malware); not remotely exploitable.

The US Cybersecurity & Infrastructure Security Agency (CISA) is urging federal agencies to immediately patch a critical Oracle Identity Manager flaw that is now confirmed to be under active ...

Windows 10 PCs can receive free security updates until October 2026. To qualify for free personal updates, enroll with a Microsoft account. Customers in any of the 30 EEA countries automatically ...

Today, Fortinet released security updates to patch a new FortiWeb zero-day vulnerability that threat actors are actively exploiting in attacks. Tracked as CVE-2025-58034, this web application firewall ...

Proxmox Datacenter Manager 1.0 has just been released. The product was officially released in stable version 1.0 on December ...