Description A high-severity authentication bypass vulnerability (CVE-2025-3102) in the OttoKit WordPress plugin (formerly known as SureTriggers) has . . . Read more
Description A new malware campaign has been uncovered exploiting the SourceForge platform to distribute fake Microsoft Office add-in tools. These mal . . . Read more
Description A newly disclosed vulnerability in WinRAR, tracked as CVE-2025-31334, allows attackers to bypass Windows’ Mark of the Web (MotW) se . . . Read more
Description A critical remote code execution (RCE) vulnerability (CVE-2025-30065) has been discovered in Apache Parquet, a widely used columnar stora . . . Read more
Description Cisco has issued a critical security warning regarding a built-in backdoor administrative account found in the Cisco Smart Licensing Util . . . Read more
Description SSL (Secure Sockets Layer) is essential for encrypting data transmitted between clients and servers, ensuring confidentiality and authenti . . . Read more
Description As organizations increasingly migrate their operations to the cloud, ensuring robust security measures in cloud environments has become c . . . Read more
Description A newly discovered information-stealing malware, Arcane, is actively targeting YouTube and Discord users through malicious game cheats an . . . Read more
Description A newly discovered Windows vulnerability (ZDI-CAN-25373) has been actively exploited by at least 11 state-sponsored hacking groups from N . . . Read more
Description Cybercriminals are exploiting malicious Microsoft OAuth applications disguised as Adobe and DocuSign apps to compromise Microsoft 365 acco . . . Read more
Description YouTube has issued a warning regarding a phishing campaign leveraging AI-generated deepfake videos of CEO Neal Mohan. Scammers use these v . . . Read more
Description A new and previously undocumented polyglot malware is being deployed against aviation, satellite communication, and critical transportatio . . . Read more