A recently disclosed vulnerability in the Linux kernel, known as Zapscape, could enable attackers to escape KVM isolation and execute code on the host system from a guest virtual machine.
A serious vulnerability in IBM's Langflow AI platform allows unauthorized remote code execution, prompting urgent action for affected users.
A recent discovery by Pillar Security highlights a significant vulnerability in Google's Agent Development Kit, enabling potential agent-on-agent exploitation.
A significant flaw in Coldcard hardware wallets has been identified as the cause behind the theft of over $70 million in Bitcoin. The vulnerability stems from a firmware issue that affects the generation of cryptographic seeds.
A recent analysis reveals vulnerabilities in Microsoft Word's Copilot feature, allowing for self-propagating attacks through document workflows.
A public exploit has been released for a previously patched remote code execution vulnerability in vBulletin, affecting versions 6.2.1 and earlier, as well as 6.1.6 and earlier.
A serious vulnerability in Fastjson, Alibaba's JSON library for Java, is being actively exploited, with no patch currently available.
A researcher has published an exploit for a GitLab vulnerability that allows authenticated users to execute commands on self-managed servers. This flaw affects versions that have not been updated since June 10.
A newly discovered vulnerability, dubbed Certighost, enables low-privileged Active Directory users to impersonate Domain Controllers, raising significant security concerns for organizations utilizing Microsoft Active Directory.
A recently identified flaw in OpenSSL could cause servers to reserve excessive memory, potentially leading to denial-of-service conditions. This issue, termed HollowByte, arises from the handling of TLS requests.
