Threat actors are exploiting a recently discovered command injection vulnerability that affects multiple D-Link DSL gateway ...

RondoDox botnet exploits the React2Shell vulnerability in Next.js, with over 90,000 exposed systems used to deploy miners and ...

Recent attacks are targeting Next.js servers and pose a significant threat of cryptomining and other malicious activity to ...

The CISA KEV catalog was expanded with 245 vulnerabilities in 2025, including 24 flaws exploited by ransomware groups.

The zero-day exploitations of Ivanti's MDM platform meant unprecedented pwning of 1000s of orgs by a Chinese APT — and ...

The operators behind the highly adaptable RondoDox botnet campaign that kicked off in late March have proven to be ready to embrace the latest attack trends. Most recently, in December they began ...

A newly uncovered Chinese threat group known as DarkSpectre has been linked to one of the most widespread browser extension ...

Predator has remained available through the Intellexa spyware consortium despite US sanctions imposed in 2024 on ...

Open WebUI, an open-source, self-hosted web interface for interacting with local or remote AI language models, carried a high ...

SmarterMail patched CVE-2025-52691, a maximum-severity RCE flaw allowing unauthenticated arbitrary file uploads Exploitation ...