A critical vulnerability in the Funnel Builder plugin for WordPress is being actively exploited to inject malicious JavaScript snippets into WooCommerce checkout pages.
Stolen browser sessions and authentication tokens are becoming more valuable than stolen passwords. Flare explains how the ...
During the second day of Pwn2Own Berlin 2026, competitors collected $385,750 in cash awards after exploiting 15 unique zero-day vulnerabilities in multiple products, including Windows 11, Microsoft ...
Two vulnerabilities in the Avada Builder plugin for WordPress, with an estimated one million active installations, allow ...
Hackers have injected credential-stealing malware into newly published versions of node-ipc, a popular inter-process communication package, in a new supply chain attack targeting npm. The node-ipc ...
Microsoft is updating the Edge web browser to ensure it no longer loads saved passwords into process memory in clear text at ...
On Thursday, Microsoft shared mitigations for a high-severity Exchange Server vulnerability exploited in attacks that allow ...
Hackers are leveraging a critical authentication bypass vulnerability in the WordPress plugin Burst Statistics to obtain ...
OpenAI says two employees' devices were breached in the recent TanStack supply chain attack that impacted hundreds of npm and ...
Linux distros are rolling out patches for a new high-severity kernel privilege escalation vulnerability (known as Fragnasia ...
Cisco is warning that a critical Catalyst SD-WAN Controller authentication bypass flaw, tracked as CVE-2026-20182, was ...
A cybersecurity researcher has published proof-of-concept (PoC) exploits for two unpatched Microsoft Windows vulnerabilities ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results