An anonymous researcher has dumped what they say is working exploit code for zero-day vulnerabilities across 15 software ...

Microsoft details AutoJack exploit chain targeting AutoGen Studio MCP WebSocket in pre-release builds, enabling ...

A newly disclosed FFmpeg flaw dubbed 'PixelSmash' could be exploited for remote code execution on Jellyfin servers under ...

Adobe has released security patches for seven maximum-severity vulnerabilities in the ColdFusion web app development platform ...

Nightmare Eclipse Zero-Days: Three zero-day vulnerabilities disclosed by Nightmare Eclipse, complete with exploit code, were ...

The popular product lifecycle management platform is under active exploitation for an RCE vulnerability that could put ...

OS 26.5.2 security update arrives weeks early as Apple adapts to AI tools that compress vulnerability discovery into hours.

The flaw enables server-side request forgery (SSRF) and escalates privileges to root, impacting Cisco Unified CM and Unified ...

The UK’s healthcare sector is being “stress-tested to breaking point," with a tenfold increase in attacks during January-May ...

Read how Microsoft Security has advanced its agentic vulnerability detection system, codename MDASH, integrating into ...

What happened Threat actors are actively exploiting an unauthenticated information disclosure vulnerability in the Gravity SMTP WordPress plugin, which is installed on more than 100,000 WordPress ...

CVE-2026-20230, a recently patched vulnerability affecting Cisco’s Unified Communications Manager, is being exploited in ...