Ionut Arghire

On Android, the out-of-bounds write issue can be triggered during the processing of media files without user interaction.

Set for January 2026 at Automotive World in Tokyo, the contest will have six categories, including Tesla, infotainment systems, EV chargers, and automotive OSes.

CVE-2025-55315 is an HTTP request smuggling bug leading to information leaks, file content tampering, and server crashes.

Hackers stole names, addresses, dates of birth, email addresses, Social Security numbers, government IDs, and other information.

The unauthenticated local file inclusion bug allows attackers to retrieve the machine key and execute code remotely via a ViewState deserialization issue.

The company’s AI Security Engineer autonomously keeps enterprise data protected across devices and environments.

A public PoC existed when Adobe patched the Experience Manager Forms (AEM Forms) bug in early August.

Threat actors are exploiting CVE-2025-20352, a recent Cisco zero-day, to deploy a rootkit on older networking devices.

Matthew Lane pleaded guilty in May to extorting two companies after hacking into their networks and stealing information.

Adobe has published a dozen security advisories detailing over 35 vulnerabilities across its product portfolio.

The tech giant has rolled out fixes for 173 CVEs, including five critical-severity security defects.

SAP has rolled out additional protections for insecure deserialization bugs resolved in NetWeaver AS Java recently.

Resistant AI will use the funding to expand its fraud detection and transaction monitoring offerings to new markets.

A vulnerability in RMP initialization allows the AMD processor’s x86 cores to maliciously control parts of the initial RMP state.

Threat actors have rapidly compromised more than 100 SonicWall SSL VPN accounts pertaining to over a dozen entities.

Threat actors used automation to create over 175 malicious NPM packages targeting more than 135 organizations.

The authorities arrested GoogleXcoder, the alleged administrator of GXC Team, which offered phishing kits and Android malware.

The data allegedly pertains to Albertsons, Engie Resources, Fujifilm, GAP, Qantas, and Vietnam Airlines.

GreyNoise has discovered that attacks exploiting Cisco, Fortinet, and Palo Alto Networks vulnerabilities are launched from the same infrastructure.

The botnet packs over 50 exploits targeting unpatched routers, DVRs, NVRs, CCTV systems, servers, and other network devices.