Huntress reports active attacks abusing Gladinet’s fixed cryptographic keys to forge tickets and gain remote code execution ...
A new report out today from artificial intelligence security startup Cyata Security Ltd. details a critical remote code ...
Static AES keys are enabling attackers to decrypt access tokens and reach remote code execution, triggering urgent patch ...
Critical n8n flaw CVE-2025-68613 (CVSS 9.9) lets authenticated users run arbitrary code; versions 0.211.0–1.120.4 affected, ...
MongoDB has warned IT admins to immediately patch a high-severity vulnerability that can be exploited in remote code ...
WatchGuard has warned customers to patch a critical, actively exploited remote code execution (RCE) vulnerability in its ...
WatchGuard warns that the critical Firebox vulnerability CVE-2025-14733 has been exploited in attacks for remote code ...
Over the past week, enterprise security teams observed a combination of covert malware communication attempts and aggressive probing of publicly exposed infrastructure. These incidents, detected ...
The critical React2Shell flaw actively exploit crypto miners, backdoors and advanced malware globally, urging for an ...
In the remote maintenance software Connectwise ScreenConnect, authenticated attackers can inject malicious code. An update is ...
Yesterday, user @NSA_Employee39 allegedly posted a zero-day exploit for the popular open-source file decompression utility 7-Zip on Twitter, only to have 7-Zip author Igor Pavlov swiftly dismiss it as ...