Apple Issues Security Updates After Two WebKit Flaws Found Exploited in the Wild

December 13, 2025 at 11:02AM Apple on Friday released security updates for iOS, iPadOS, macOS, tvOS, watchOS, visionOS, and its…

Fake OSINT and GPT Utility GitHub Repos Spread PyStoreRAT Malware Payloads

December 13, 2025 at 12:20AM Cybersecurity researchers are calling attention to a new campaign that's leveraging GitHub-hos…

Securing GenAI in the Browser: Policy, Isolation, and Data Controls That Actually Work

December 12, 2025 at 03:48PM The browser has become the main interface to GenAI for most enterprises: from web-based LLMs and c…

React2Shell Exploitation Escalates into Large-Scale Global Attacks, Forcing Emergency Mitigation

December 12, 2025 at 02:11PM The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has urged federal agencies to pat…

CISA Flags Actively Exploited GeoServer XXE Flaw in Updated KEV Catalog

December 12, 2025 at 10:31AM The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a high-severity…

Chrome Targeted by Active In-the-Wild Exploit Tied to Undisclosed High-Severity Flaw

December 11, 2025 at 12:39PM Google on Wednesday shipped security updates for its Chrome browser to address three security flaw…

Active Attacks Exploit Gladinet's Hard-Coded Keys for Unauthorized Access and Code Execution

December 11, 2025 at 11:26AM Huntress is warning of a new actively exploited vulnerability in Gladinet's CentreStack and Tr…

React2Shell Exploitation Delivers Crypto Miners and New Malware Across Multiple Sectors

December 11, 2025 at 01:49AM React2Shell continues to witness heavy exploitation, with threat actors leveraging the maximum-sev…

.NET SOAPwn Flaw Opens Door for File Writes and Remote Code Execution via Rogue WSDL

December 11, 2025 at 12:51AM New research has uncovered exploitation primitives in the .NET Framework that could be leveraged a…

Warning: WinRAR Vulnerability CVE-2025-6218 Under Active Attack by Multiple Threat Groups

December 10, 2025 at 05:24PM The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a security flaw …

Microsoft Issues Security Fixes for 56 Flaws, Including Active Exploit and Two Zero-Days

December 10, 2025 at 02:20PM Microsoft closed out 2025 with patches for 56 security flaws in various products across the Window…

Fortinet, Ivanti, and SAP Issue Urgent Patches for Authentication and Code Execution Flaws

December 10, 2025 at 10:20AM Fortinet, Ivanti, and SAP have moved to address critical security flaws in their products that, if…