vulnerabilities

| Security | Jul 11, 2025

CISA says "Citrix Bleed 2" is officially being exploited after all

A person walks away from the camera, their shadow can be seen framed by window light. Citrix Bleed 2 comes in the shadow of the original vulnerability from 2023.

Exploits date back as early as June 23...

| Security | Jun 29, 2025

CVSS 10 bug in baseboard firmware exploited in the wild - that's a klaxon for CISOs

AMI vulnerability baseboard management controller security

Vulnerability in ubiquitous remote server management firmware from AMI affects Asus, ASRock, Blackcore, HPE, Gigabyte, NetApp, Lenovo, Siemens servers; more.

Citrix | Jun 26, 2025

Netscaler vulnerability being exploited: Citrix

Citrix Bleed #3? Buckle up.

Security | Jun 18, 2025

New Linux bug a “critical and universal” risk?

CVE-2025-6019 is "trivially exploitable", gives root,

| Security | May 21, 2025

Bugs from 2017 are still great for hacking governments

A rattlesnake poises to strike. Sidewinder, also known as RattleSnake, has been targeting governments in Sri Lanka, Pakistan and Bangladesh

Also known as Rattle Snake, the group has history back to 2012.

| Security | May 07, 2025

Hacker used DeepSeek to create LangFlow exploit

Over 500 instances are publicly exposed and attacks are happening in the wild

vulnerabilities | Apr 28, 2025

1,100 systems popped as CVSS 10 SAP NetWeaver bug exploited

Victims "predominantly belong to large enterprises and critical infrastructure operators"

| News | Apr 17, 2025

CVSS 10 bug allows pre-auth access to Erlang/OTP SSH servers, host devices

A sign reading "Restricted Area. Authorized Personnel Only" - the Erlang/OTP bug allows attackers unauthorised access

Users advised to immediately update or restrict SSH server access

vulnerabilities | Apr 11, 2025

Android RAT sneaks onto devices through fake Google Play downloads

A rat pokes its head through a cardboard box. the SpyNote malware is described as an AndroidOS RAT

China nexus group suspected as the attackers behind attacks

document.currentScript.parentNode.innerHTML = (parseInt(document.currentScript.closest('.iteration-container').dataset.length)).toString();