CORS Header

Urgent: Cisco ASA Zero-Day Duo Under Attack; CISA Triggers Emergency Mitigation Directive

Fake Microsoft Teams installers push Oyster malware via malvertising

Financial services firm Wealthsimple discloses data breach

EvilAI Malware Masquerades as AI Tools to Infiltrate Global Organizations

UNC1549 Hacks 34 Devices in 11 Telecom Firms via LinkedIn Job Lures and MINIBIKE Malware

Windows 11 KB5065789 update released with 41 changes and fixes

Microsoft now enforces MFA on Azure Portal sign-ins for all tenants

Fake Madgicx Plus and SocialMetrics Extensions Are Hijacking Meta Business Accounts

Threatsday Bulletin: Rootkit Patch, Federal Breach, OnePlus SMS Leak, TikTok Scandal & More

Microsoft will offer free Windows 10 extended security updates in Europe

CVE-2025-20333 Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability

CVE-2014-6278 GNU Bash OS Command Injection Vulnerability

CVE-2015-7755 Juniper ScreenOS Improper Authentication Vulnerability

CVE-2025-32463 Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability

CVE-2025-20352 Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability

CVE-2025-59689 Libraesva Email Security Gateway Command Injection Vulnerability

CVE-2013-3893 Microsoft Internet Explorer Resource Management Errors Vulnerability

CVE-2021-21311 Adminer Server-Side Request Forgery Vulnerability

CVE-2022-40139 Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability

CVE-2022-43939 Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability

HighHeartbleed OpenSSL Vulnerability (Indicative)

MediumExponential Entity Expansion (Billion Laughs Attack)

InformationalNon-Storable Content

HighGeneric Padding Oracle

LowStrict-Transport-Security Header Not Set

MediumReferer Exposes Session ID

MediumSpring Actuator Information Leak

HighRemote OS Command Injection

HighSource Code Disclosure - /WEB-INF Folder

MediumTrace.axd Information Leak

CWE-475 Undefined Behavior for Input to API

CWE-657 Violation of Secure Design Principles

HighCWE-676 Use of Potentially Dangerous Function

CWE-1254 Incorrect Comparison Logic Granularity

CWE-383 J2EE Bad Practices: Direct Use of Threads

HighCWE-322 Key Exchange without Entity Authentication

CWE-425 Direct Request ('Forced Browsing')

CWE-1111 Incomplete I/O Documentation

CWE-1122 Excessive Halstead Complexity

CWE-1042 Static Member Data Element outside of a Singleton Class Element