In-depth coverage of the latest Vulnerabilities & CVEs developments, trends, and analysis — curated daily.
The digital equivalent of finding a Trojan horse in your code library just got a lot scarier. The Mini Shai-Hulud campaign is here, and it's not just about hitting tech giants; it's about every developer and every organization that relies on open-source software.
Forget the fancy code; the real news is that the tools you trust to build your software might now be the ones stealing your secrets. A clever hijacking of popular GitHub Actions means your CI/CD pipelines could be quietly coughing up credentials.
A barrage of critical vulnerabilities, including a zero-day on Microsoft Exchange and a rapidly spreading npm worm, underscores the precarious state of digital supply chains. Are you prepared for the next wave?
The recent Pwn2Own Berlin event wasn't just about bragging rights; it was a stark reminder of the vulnerabilities lurking in the enterprise AI stack. Almost $1.3 million was awarded for uncovering 47 zero-day flaws.
Forget just securing the code repository. A seismic shift is underway, transforming developer workstations into the hottest new target for sophisticated supply chain attacks.
The digital equivalent of finding a skeleton key for your Linux server just dropped. DirtyDecrypt, a kernel flaw, has been weaponized, allowing attackers to snatch root privileges.
Your Windows system is about to get interesting. A new zero-day, dubbed MiniPlasma, hands over SYSTEM access. And guess what? The proof-of-concept is already out.
The dust has settled on Pwn2Own Berlin 2026, with white hat hackers walking away with a staggering $1.3 million. The competition showcased the relentless pursuit of zero-day vulnerabilities across a diverse tech landscape.
Fortinet's latest patches for FortiSandbox and FortiAuthenticator might sound like tech jargon, but for anyone whose business relies on these security products, it's a wake-up call.
The Pwn2Own Berlin 2026 hacking contest saw a massive payout for security researchers, with nearly $1.3 million handed out for the discovery of 47 zero-day vulnerabilities. This year's event put a spotlight on enterprise technologies and the rapidly expanding AI landscape.
The internet's foundational web server, NGINX, is under fire. A critical flaw is already being weaponized in the wild, with implications ranging from service disruption to full system compromise.
Forget secure enclaves and complex mitigations. A new 0-click exploit chain for the Pixel 10 has emerged, demonstrating a profound vulnerability in how the device handles video decoding, allowing for complete kernel takeover.