The explosive, easy-to-trigger vulnerability was exploited within hours of disclosure, exposing the risks of default ...
The RondoDox botnet has been observed exploiting the critical React2Shell flaw (CVE-2025-55182) to infect vulnerable Next.js ...
Business-grade email server software SmarterMail just patched a maximum-severity vulnerability that allowed threat actors to ...
The zero-day exploitations of Ivanti's MDM platform meant unprecedented pwning of 1000s of orgs by a Chinese APT — and ...
A severe vulnerability affecting multiple MongoDB versions, dubbed MongoBleed (CVE-2025-14847), is being actively exploited ...
Trust Wallet confirmed a supply chain attack let hackers push a malicious Chrome extension update, draining $8.5 million from ...
Trust Wallet has launched a formal compensation package for victims of a security incident affecting its Chrome browser ...
Infosecurity has selected five of the most significant vulnerability exploitation campaigns of 2025 that led to major ...