Vulnerability
React2Shell Vulnerability Exploited In the Wild Prompts CISA Warning
A critical security vulnerability dubbed React2Shell, affecting React Server Components, is now under active attack, prompting the U.S. Cyb…
Section
Vulnerability
Latest Vulnerability news and analysis.
Vulnerability
React2Shell Under Attack Chinese Hackers Pounce on New Vulnerability
Chinese state-sponsored hacking groups are already actively exploiting the recently revealed React2Shell vulnerability, targeting React Ser…
Vulnerability
React and Next.js Patches Needed to Fix Remote Code Execution Risk
Developers using React Server Components in React and Next.js should update their applications immediately. A newly discovered, critical vu…
Vulnerability
OneLogin API Vulnerability Allowed Secret Theft, App Impersonation
A critical flaw in the One Identity OneLogin platform could have allowed attackers to pilfer sensitive OpenID Connect client secrets. Exper…
Vulnerability
GoAnywhere MFT Zero-Day Exploited Before Patch, Researchers Say
A critical vulnerability in Fortra's GoAnywhere Managed File Transfer (MFT) software, carrying the highest severity score, was actively exp…
Vulnerability
Urgent Sitecore Patch Needed CISA Warns of Active Exploitation
Federal agencies are under pressure to patch a critical security vulnerability in Sitecore, as cybersecurity officials at CISA confirm the…
Vulnerability
Android Patches Plug Actively Exploited Qualcomm Security Holes
Android devices are getting a crucial security boost this month, with Google's latest updates tackling a range of vulnerabilities. Of parti…
Vulnerability
Apple Fixes Safari Flaw Previously Targeted in Chrome Zero-Day Attacks
Apple rolled out security updates across its software lineup this week, addressing a vulnerability also exploited as a zero-day in Google's…
Vulnerability
Mitel Patches Critical Flaw Opening MiVoice MX-ONE to Takeover
A serious vulnerability in Mitel's MiVoice MX-ONE phone system could allow attackers to completely bypass login security, potentially grant…
Vulnerability
Chinese Hackers Target Critical Systems Worldwide Using SAP Flaw
Multiple Chinese government-linked hacking groups are actively exploiting a recently discovered vulnerability in SAP NetWeaver, putting cri…
Vulnerability
Commvault Bug Exploited in the Wild Lands on CISA's Must-Patch List
A critical vulnerability in Commvault Command Center is now under active attack, prompting the U.S. Cybersecurity and Infrastructure Securi…
Vulnerability
AI Systems Riddled with Security Holes, Data Theft a Real Threat
Popular AI platforms are facing serious security questions after researchers discovered they are susceptible to jailbreak attacks. These fl…