Business-grade email server software SmarterMail just patched a maximum-severity vulnerability that allowed threat actors to ...
December 2025, the RondoDox botnet operators have been targeting Next.js servers impacted by the React2Shell vulnerability.
The explosive, easy-to-trigger vulnerability was exploited within hours of disclosure, exposing the risks of default ...
A newly disclosed remote code execution vulnerability in Spring Core, a widely used Java framework, does not appear to represent a Log4Shell-level threat. Security researchers at several organizations ...
Join our daily and weekly newsletters for the latest updates and exclusive content on industry-leading AI coverage. Learn More VMware disclosed on Saturday that three Tanzu products are “impacted” by ...
A new OpenSSH unauthenticated remote code execution (RCE) vulnerability dubbed "regreSSHion" gives root privileges on glibc-based Linux systems. OpenSSH is a suite of networking utilities based on the ...
The recently discovered Shellshock - or Bash - vulnerability is being actively targeted by malware gangs, who appear to have already claimed more than 700 victims. See Also: Averting the Breach: 5 ...
Security teams should be alert to the possibility of compromise arising from a vulnerability in Apache Commons Text that may put many organisations at risk, but is unlikely to be as impactful as ...