Trezor’s disclosure that another 67,000 U.S. customers were affected by the ShipMonk breach significantly changes the understanding of the incident. The newly identified records relate to orders…
Broadcom has released fixes for two serious vulnerabilities in VMware Workstation and VMware Fusion, including a critical flaw that can allow an attacker with administra…
The breach of JetBrains Cadence is a particularly important incident because it combines several high-risk elements in one attack: an internet-facing CI/CD component, a …
The discovery of a new zero-day vulnerability affecting Magento Open Source and Adobe Commerce is particularly serious because attackers are already exploiting the flaw …
CISA’s addition of CVE-2026-85046 to the Known Exploited Vulnerabilities Catalog on September 4, 2026 materially changes how organiza…
Google has released an emergency Chrome security update addressing CVE-2026-85046, a high-severity type-confusion vulnerability in the V8 J…
The targeting of CVE-2026-19490 against Citrix NetScaler ADC and NetScaler Gateway appliances is particularly concerning because the vulner…
Reports linking IDScan.net to a dark-web marketplace offering access to more than 153 million U.S. and Canadian driver’s-license reco…
CISA’s ICSA-26-246-02 advisory covers a critical vulnerability in the IXON VPN Client that could allow an attacker to execute command…
The growing abuse of Node.js in targeted attacks is another example of how threat actors increasingly prefer to operate through trusted sof…
CISA’s ICSA-26-246-07 advisory highlights a critical vulnerability in Pyramid Solutions’ NetStaX EtherNet/IP Stack that deserve…
The disclosure that an unauthorized party obtained files from Thomson Reuters’ C-Track court case-management environment highlights t…
The discovery of BraZetsu, a Python-based Windows malware framework linked by Group-IB to an operation tracked as Exilware, highlights an i…
Cisco has disclosed a critical vulnerability in certain Silicon One-based Nexus 9000 Series switches that could allow an unauthenticated re…
The compromise of Coder’s registry infrastructure is a strong reminder that software supply-chain attacks do not always require compr…