Critical Gogs zero-day under attack, 700 servers hacked

6 months ago

Hackers exploited an unpatched Gogs zero-day, allowing remote code execution and compromising around 700 Internet-facing servers. Gogs is a self-hosted…

GeminiJack zero-click flaw in Gemini Enterprise allowed corporate data exfiltration

6 months ago

Google fixed GeminiJack, a zero-click Gemini Enterprise flaw that could leak corporate data via crafted emails, invites, or documents, Noma…

Google fixed a new actively exploited Chrome zero-day

6 months ago

Google addressed three vulnerabilities in the Chrome browser, including a high-severity bug already exploited in the wild. Google released security…

Pro-Russia Hacktivist Support: Ukrainian Faces US Charges<gwmw style="display:none;"></gwmw>

6 months ago

Ukrainian Victoria Dubranova, 33, faces US charges for aiding pro-Russia hacktivist groups CARR and NoName057(16) in global cyberattacks. A Ukrainian…

Fortinet fixed two critical authentication-bypass vulnerabilities

6 months ago

Fortinet patched 18 flaws, including two authentication-bypass bugs affecting FortiOS, FortiWeb, FortiProxy, and FortiSwitchManager with FortiCloud SSO enabled. Fortinet addressed…

New EtherRAT backdoor surfaces in React2Shell attacks tied to North Korea

6 months ago

NK-linked hackers are likely exploiting the React2Shell flaw to deploy a newly discovered remote access trojan, dubbed EtherRAT. North Korea–linked…

U.S. CISA adds Microsoft Windows and WinRAR flaws to its Known Exploited Vulnerabilities catalog

6 months ago

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Microsoft Windows and WinRAR flaws to its Known Exploited Vulnerabilities catalog. The…

Microsoft Patch Tuesday security updates for December 2025 fixed an actively exploited zero-day<gwmw style="display:none;"></gwmw>

6 months ago

Microsoft Patch Tuesday security updates for December 2025 address 57 vulnerabilities, including three critical flaws. Microsoft Patch Tuesday security updates…

Ivanti warns customers of new EPM flaw enabling remote code execution

6 months ago

Ivanti warns users to address a newly disclosed Endpoint Manager vulnerability that could let attackers execute code remotely. Software firm…

Broadside botnet hits TBK DVRs, raising alarms for maritime logistics

6 months ago

Mirai-based Broadside botnet targets vulnerable TBK Vision DVRs, posing a potential threat to the maritime logistics sector, Cydome warns. Cydome…

This website uses cookies.