Microsoft on Thursday announced the rollout of 22 new security updates that resolve severe vulnerabilities across multiple products, including a critical Entra ID zero-day exploited in...
Cybersecurity researchers have flagged a new malware family that’s specifically designed to infect Android-based vehicle head unit firmware developed by DoFun. Kaspersky, which discovered the threat in June...
Thermo Fisher Scientific has patched a flaw in select Applied Biosystems human identification software that could allow data files to be altered before analysis software loads...
A vulnerability in Coldcard hardware wallets has been linked to a major Bitcoin theft campaign that drained more than 1,000 cryptocurrency addresses within minutes, exposing millions...
Three high-severity security flaws have been disclosed in Hugging Face’s Diffusers library that could allow crafted model repositories to stealthily execute arbitrary code on machines that load it,...
A critical security vulnerability in the open-source Ruflo artificial intelligence platform could allow unauthenticated attackers to execute commands remotely, steal sensitive credentials, and manipulate AI memory...
Amazon Threat Intelligence has linked the 2025 hijacking of popular npm packages debug and chalk to a North Korean cyber threat group, marking a major shift...
A coordinated cyberattack targeted more than 30 community water systems across Minnesota, prompting a statewide cybersecurity response after several utilities experienced operational disruptions, including one water...
Broadcom has released emergency security updates to address multiple vulnerabilities affecting VMware products, including vCenter Server, ESXi, Workstation, and Fusion. Three of the vulnerabilities have been...
A critical security vulnerability in the Ruby on Rails framework could allow unauthenticated attackers to access sensitive files from application servers by uploading specially crafted image...