The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Cybersecurity researchers have disclosed details of a now-patched vulnerability in the popular figma-developer-mcp Model Context Protocol (MCP) server that cou…
Google's DeepMind division on Monday announced an artificial intelligence (AI)-powered agent called CodeMender that automatically detects, patches, and rewrite…
Oracle has confirmed a critical remote code execution flaw in E-Business Suite, tracked as CVE-2025-61882. The bug resides in the Concurrent Processing and BI …
Redis has disclosed details of a maximum-severity security flaw in its in-memory database software that could result in remote code execution under certain cir…
Redis has disclosed details of a maximum-severity security flaw in its in-memory database software that could result in remote code execution under certain cir…
Microsoft on Monday attributed a threat actor it tracks as Storm-1175 to the exploitation of a critical security flaw in Fortra GoAnywhere software to facilita…
Three new OpenSSL flaws, CVE-2025-9230, 9231, and 9232, were patched upstream this week. They aren't another Heartbleed, but they still matter. Each one can op…
A now patched security vulnerability in Zimbra Collaboration was exploited as a zero-day earlier this year in cyber attacks targeting the Brazilian military.Tr…
CISA has added CVE-2025-32463 to its Known Exploited Vulnerabilities catalog, a flaw in sudo that affects nearly every Linux distribution. The bug allows a lim…
A severe security flaw has been disclosed in the Red Hat OpenShift AI service that could allow attackers to escalate privileges and take control of the complet…
A group of academics from KU Leuven and the University of Birmingham has demonstrated a new vulnerability called Battering RAM to bypass the latest defenses on…
A group of academics from KU Leuven and the University of Birmingham has demonstrated a new vulnerability called Battering RAM to bypass the latest defenses on…
Cybersecurity researchers have disclosed three now-patched security vulnerabilities impacting Google's Gemini artificial intelligence (AI) assistant that, if s…
A serious security vulnerability has been discovered in MyCourts, the popular tennis court booking and…Critical Security Flaw in MyCourts: What Tennis Clubs Ne…
The U.K. National Cyber Security Centre (NCSC) has revealed that threat actors have exploited the recently disclosed security flaws impacting Cisco firewalls a…
Cisco is urging customers to patch two security flaws impacting the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisc…
Computer systems, software, applications, and Linux servers are all vulnerable to network security threats. Failure to identify these cybersecurity vulnerabili…
Cisco has warned of a high-severity security flaw in IOS Software and IOS XE Software that could allow a remote attacker to execute arbitrary code or trigger a…
Think payment iframes are secure by design? Think again. Sophisticated attackers have quietly evolved malicious overlay techniques to exploit checkout pages an…
Libraesva has released a security update to address a vulnerability in its Email Security Gateway (ESG) solution that it said has been exploited by state-spons…
Cybersecurity researchers have disclosed details of two security vulnerabilities impacting Supermicro Baseboard Management Controller (BMC) firmware that could…
Modern CPUs are fast''blindingly fast''partly because they don't always wait around for instructions. Instead, they guess which calculations, memory fetches, o…
The security landscape now moves at a pace no patch cycle can match. Attackers aren’t waiting for quarterly updates or monthly fixes—they adapt within hours, b…
Fortra has disclosed details of a critical security flaw in GoAnywhere Managed File Transfer (MFT) software that could result in the execution of arbitrary com…