ShadowPad malware is being delivered through an actively exploited WSUS vulnerability, granting attackers full system access.

CISA adds exploited Oracle Identity Manager CVSS 9.8 flaw to KEV catalog as agencies rush to patch zero-day attacks.

It was reported by Oracle on November 21 and added to CISA Known Exploited Vulnerabilities (KEV) catalog the same day ...

Fortinet has silently patched a critical zero-day vulnerability in its FortiWeb web application firewall, which is now being ...

Today, Fortinet released security updates to patch a new FortiWeb zero-day vulnerability that threat actors are actively ...

A threat actor exploited a critical vulnerability in Triofox to obtain remote access to a vulnerable server and then achieve code execution.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is urging a quick response to Fortinet’s disclosure of a ...

A security vulnerability in Asus router models can be exploited for targeted attacks. A firmware update provides a remedy, so ...

A critical-severity vulnerability that impacts the Identity Manager tool within Oracle’s Fusion Middleware platform has seen ...

SolarWinds this week announced patches for three critical vulnerabilities found in its Serv-U enterprise file transfer ...

Google has released an important security fix for Chrome users on desktop, signaling that hackers may be exploiting the issue ...

Microsoft (NASDAQ:MSFT) said Chinese hackers have been exploiting vulnerabilities in its SharePoint software, which led to breaches recently. Microsoft said it has observed two named Chinese ...