Base64 Disclosure

Hijacked Microsoft Stream classic domain spams SharePoint sites

Infostealer campaign compromises 10 npm packages, targets devs

Chinese FamousSparrow hackers deploy upgraded malware in attacks

Windows 11 KB5053656 update released with 38 changes and fixes

Microsoft: New Windows scheduled task will launch Office apps faster

New Morphing Meerkat Phishing Kit Mimics 114 Brands Using Victims' DNS Email Records

The 4 WordPress flaws hackers targeted the most in Q1 2025

Mozilla warns Windows users of critical Firefox sandbox escape flaw

WhatsApp's Meta AI is now rolling out in Europe, and it can't be turned off

Hackers Repurpose RansomHub's EDRKillShifter in Medusa, BianLian, and Play Attacks

CVE-2025-2783 Google Chromium Mojo Sandbox Escape Vulnerability

CVE-2019-9874 Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability

CVE-2019-9875 Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability

CVE-2025-30154 reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability

CVE-2025-1316 Edimax IC-7100 IP Camera OS Command Injection Vulnerability

CVE-2024-48248 NAKIVO Backup and Replication Absolute Path Traversal Vulnerability

CVE-2017-12637 SAP NetWeaver Directory Traversal Vulnerability

CVE-2025-24472 Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability

CVE-2025-30066 tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability

CVE-2025-24201 Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability

MediumWeak Authentication Method

MediumCSP: Malformed Policy (Non-ASCII)

HighASP.NET ViewState Integrity

HighExternal Redirect

MediumSub Resource Integrity Attribute Missing

LowBig Redirect Detected (Potential Sensitive Information Leak)

InformationalInformation Disclosure - Suspicious Comments in XML via WebSocket

MediumX-Frame-Options Defined via META (Non-compliant with Spec)

MediumExponential Entity Expansion (Billion Laughs Attack)

HighPersonally Identifiable Information via WebSocket

HighCWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

CWE-1426 Improper Validation of Generative AI Output

CWE-693 Protection Mechanism Failure

CWE-1091 Use of Object without Invoking Destructor Method

CWE-1173 Improper Use of Validation Framework

CWE-1230 Exposure of Sensitive Information Through Metadata

CWE-1053 Missing Documentation for Design

CWE-1064 Invokable Control Element with Signature Containing an Excessive Number of Parameters

CWE-1099 Inconsistent Naming Conventions for Identifiers

CWE-1125 Excessive Attack Surface