Latest News

Authenticated attackers can exploit the security flaw to trigger a use-after-free and potentially execute arbitrary code.

Names, usernames, email addresses, contact information, IP addresses, and billing information was compromised.

The flaw could lead to local code execution, allowing attackers to access confidential information on devices running Unity-built applications.

Salesforce says the extortion attempts are related to past or unsubstantiated incidents, and not to fresh intrusions.

Doctors Imaging Group is informing customers about a cybersecurity incident nearly a year after it occurred. 

Wiz has teamed up with Microsoft, Google and AWS and is inviting cloud security researchers to its Zeroday.Cloud competition.

The brewing giant has reverted to manual order processing and shipment as operations at its Japanese subsidiaries are disrupted.

Oracle has informed customers that it has patched a critical remote code execution vulnerability tracked as CVE-2025-61882.

Other noteworthy stories that might have slipped under the radar: cybercriminals offer money to BBC journalist, LinkedIn user data will train AI, Tile tracker vulnerabilities.

The cybersecurity startup will expand its engineering team, add more AI capabilities, and invest in go-to-market efforts.

The security defect can be exploited remotely via crafted HTTP/S requests to a vulnerable device’s web user interface.

Patched in mid-May, the security defect allows remote unauthenticated attackers to execute arbitrary commands with root privileges.

The French cybersecurity startup tricks attackers into revealing stolen credentials so they can be neutralized.

The software giant’s investigation showed that vulnerabilities patched in July 2025 may be involved.

High-severity flaws were patched in Chrome’s WebGPU and Video components, and in Firefox’s Graphics and JavaScript Engine components.