Looking back on the year gone by in his monthly Patch Tuesday roundup, Dustin Childs of Trend Micro’s Zero Day Initiative ...

Multi-solution crowdsourced cyber security platform Bugcrowd says it saw growing acceptance and adoption of crowdsourced security strategies among mainstream end-user organisations in 2023, as ethical ...

OpenAI recently patched a Codex CLI vulnerability that can be exploited in attacks aimed at software developers.

Multiple China-linked threat actors began exploiting the React2Shell vulnerability (CVE-2025-55182) affecting React and ...

The actively exploited zero-day bug — and the one therefore that needs high-priority attention — is CVE-2025-62221, which ...

Security researchers are warning that hackers are actively exploiting another high-risk vulnerability in a popular file transfer technology to launch mass hacks. The vulnerability, tracked as CVE-2024 ...

Attackers are exploiting a critical-severity privilege escalation vulnerability (CVE-2025-8489) in the King Addons for ...

It has been seen spreading cryptojacking malware and in attempts to steal cloud credentials from compromised machines.

Microsoft's first Patch Tuesday of 2025 is larger than normal, with the company addressing 159 vulnerabilities, including eight zero-day flaws, three of which have been actively exploited in the wild.

A D-Link issue and an Array OS vulnerability have been added to the US cyber agency’s list of known exploited vulnerabilities ...

A zero-day vulnerability found in several Qualcomm chipsets was recently exploited to target Android users. The vulnerability affects 64 chipsets, including Snapdragon SoCs, modems, and FastConnect ...