آسیبپذیریها و تهدیدات روز با رتبهبندی CVSS و شدت — مستقیم از تیم تحلیل تهدیدات سیاره فناوری اطلاعات.
Overview Six vulnerabilities have been discovered within the SGLang project, including remote code execution (RCE), server-side request forgery …
This morning, I noticed specific sources "hunting" for vulnerabilities in URLs that I haven&#;x26;#;39;t noticed before. All of …
When you learn that a compromised package executed on one of your build hosts, muscle memory takes over: …
Eight security flaws in NodeBB went public on Wednesday, along with the code to exploit them. Aikido Security …
Threat actors linked to the Cl0p (aka Chubby Scorpius, FIN11, Graceful Spider, and Lace Tempest) ransomware campaign are …
Security researchers at depthfirst published working exploit code on July 24 for a GitLab flaw that GitLab patched …
A new Dolphin X remote access trojan claims to use an AI-powered profiling feature to score and rank …
The Clop ransomware gang (also tracked as Cl0p) is targeting Internet-exposed PTC Windchill and FlexPLM instances in a …
A threat actor used the open-source Hermes AI agent in unattended "YOLO" mode to automate post-exploitation activity during …
Overview Two distinct cryptographic signature verification vulnerabilities exist in Digital Bazaar node-forge, a widely used JavaScript library implementing …