Google announced a fresh set of security updates for the Android platform, to address two vulnerabilities in the System component.

This critical (CVSS 10.0) use-after-free (UAF) vulnerability in Lua scripting could allow authenticated attackers to execute ...

Flaws in Windows Graphics Device Interface (GDI) have been identified that allow remote code execution and information ...

The bug exposes the Metro development server to remote attacks, allowing arbitrary OS command execution on developer systems ...

New Android spyware named Landfall delivered to Samsung device owners through the exploitation of a zero-day tracked as CVE-2025-21042.

Security researchers at software supply chain company JFrog Ltd. today revealed details of a critical vulnerability in React, ...

Security researchers discovered multiple vulnerabilities in AI infrastructure products, including one capable of remote code ...

Three of Anthropic’s Claude Desktop extensions were vulnerable to command injection – flaws that have now been fixed ...

PandasAI, an open source project by SinaptikAI, has been found vulnerable to Prompt Injection attacks. An attacker with access to the chat prompt can craft malicious input that is interpreted as code, ...

A code execution vulnerability in the Unity game engine could be exploited to achieve code execution on Android and privilege escalation on Windows. Unity is a cross-platform game engine and ...

Here’s a detailed look at the $25M Ethereum MEV mistrial involving the Peraire-Bueno brothers and its impact on future crypto ...

New research from Google’s threat unit shows hackers are using LLMs to mutate malware and study how to steal from crypto wallets.