LATEST

Microsoft Patches 59 Vulnerabilities Including Six Actively Exploited Zero-Days

Microsoft Patches 59 Vulnerabilities Including Six Actively Exploited Zero-Days

Microsoft fixed 59 bugs in its software on Tuesday, including six that it claimed had been exploited in the wild This article explores security flaws.

Ivanti Endpoint Manager Vulnerability Allows Remote Attackers to Leak Arbitrary Data

Ivanti Endpoint Manager Vulnerability Allows Remote Attackers to Leak Arbitrary Data

CYBER ATTACKZerowl

For its Endpoint Manager (EPM) software, Ivanti has released a critical security patch in a hurry, addressing two serious flaws that could allow hackers.

GitLab Patches Multiple Vulnerabilities Enabling DoS and Cross-Site Scripting Attacks

GitLab Patches Multiple Vulnerabilities Enabling DoS and Cross-Site Scripting Attacks

CYBER ATTACKZerowl

GitLab, a well-known code collaboration platform, recently released critical security updates for its Enterprise Edition (EE) and Community Edition (CE).

APT36 Uses New Disruptive Tools to Target Linux Systems

APT36 Uses New Disruptive Tools to Target Linux Systems

CYBER ATTACKZerowl

State-sponsored "espionage ecosystems" are posing an increasing threat to critical infrastructure around the world This article explores access trojans.

Windows Remote Desktop Services 0-Day Vulnerability Exploited in the Wild to Escalate Privileges

Windows Remote Desktop Services 0-Day Vulnerability Exploited in the Wild to Escalate Privileges

CYBER ATTACKZerowl

A zero-day vulnerability in Windows Remote Desktop Services A zero-day elevation of privilege vulnerability in Windows Remote Desktop Services (RDS) that.

Windows Notepad Vulnerability Allows Attackers to Execute Malicious Code Remotely

Windows Notepad Vulnerability Allows Attackers to Execute Malicious Code Remotely

CYBER ATTACKZerowl

RCE Vulnerability in Windows Notepad Microsoft has fixed CVE-2026-20841, a critical remote code execution (RCE) vulnerability in the Windows Notepad.

TeamPCP Turns Cloud Misconfigurations Into Scalable Cybercrime Engine

TeamPCP Turns Cloud Misconfigurations Into Scalable Cybercrime Engine

CYBER ATTACKZerowl

In a massive cloud exploitation campaign, a threat group called TeamPCP—also known as PCPcat, ShellForce, and DeadCatx3—has transformed misconfigured.

GitLab Patches Multiple Vulnerabilities That Enables DoS and Cross-site Scripting Attacks

GitLab Patches Multiple Vulnerabilities That Enables DoS and Cross-site Scripting Attacks

CYBER ATTACKZerowl

Vulnerabilities are fixed by GitLab This article explores vulnerability identified cve. . To fix several high-severity vulnerabilities, a critical.

FortiOS Authentication Bypass Vulnerability Allows Attackers to Bypass LDAP Login

FortiOS Authentication Bypass Vulnerability Allows Attackers to Bypass LDAP Login

CYBER ATTACKZerowl

A shocking security alert regarding a nasty bug in its FortiOS firewall software was just released by Fortinet This article explores bug fortios firewall.

Malicious Bing Ads Spread False Azure Support Scams

Malicious Bing Ads Spread False Azure Support Scams

CYBER ATTACKZerowl

Malicious Bing search ads have been used in a recent tech support scam campaign to trick American users into visiting phony Microsoft Azure support pages.

Top 5 this week

Page 138 of 211