A critical zero-day vulnerability in Oracle E-Business Suite (EBS) was exploited by the Cl0p ransomware group in mid-2025.

Broadcom fixed the flaw in fresh releases of VMware Cloud Foundation, vSphere Foundation, Aria Operations, Telco Cloud ...

Microsoft links Storm-1175 to GoAnywhere flaw CVE-2025-10035, exploited since September for Medusa ransomware.

An elevation of privilege vulnerability in the Windows NTLM authentication protocol and a flaw in Office’s Preview Pain are among the most important to patch.

Your weekly snapshot of cyber chaos: from Oracle 0-Day exploits to fresh spyware, phishing kits, and ransomware twists—here’s ...

"There is no evidence of any exploitation of the vulnerability, nor has there been any impact on users or customers," firm ...

A critical-severity vulnerability that lingered in Redis for 13 years potentially exposes 60,000 servers to exploitation.

Critical GoAnywhere MFT vulnerability CVE-2025-10035 enables unauthenticated remote code execution, raising supply-chain attack concerns for enterprises.

A serious security flaw in widely used VMware software has been actively exploited in the wild for almost a year, with ...

Fortra has released security updates to patch a maximum severity vulnerability in GoAnywhere MFT's License Servlet that can be exploited in command injection attacks. GoAnywhere MFT is a web-based ...

Unity is a popular cross-platform game engine used to create 2D, 3D, and VR/AR games and other interactive experiences. Many ...

Pakistan’s National CERT warns of active VMware exploits. Flaws let hackers gain control. Organizations urged to patch systems immediately.