Apple has released critical security updates across all platforms to fix CVE-2025-6558, a high-severity vulnerability with an 8.8 score that was actively exploited in Google Chrome. The flaw affects Apple's WebKit browser engine, allowing attackers to escape security sandboxes through mali...
Researchers have discovered DslogdRAT, a new malware exploiting CVE-2025-0282 in Ivanti Connect Secure (ICS). This critical vulnerability allows unauthenticated remote code execution and was patched in January 2025. The attack deploys a Perl web shell that installs DslogdRAT, which then co...
SAP has released emergency patches for a critical zero-day vulnerability (CVE-2025-31324, CVSS 10.0) in NetWeaver's Visual Composer that's under active exploitation. The unauthenticated file upload flaw allows attackers to upload malicious files and execute remote code without authenticati...
Microsoft has disclosed a patched Windows CLFS vulnerability (CVE-2025-29824) exploited as a zero-day in targeted ransomware attacks. The flaw allowed privilege escalation to SYSTEM level and was fixed in April 2025's Patch Tuesday. Tracked as Storm-2460, attacks targeted organizations in ...
Apple has released a critical security update to patch a zero-day vulnerability (CVE-2025-24201) in WebKit that was actively exploited in "extremely sophisticated" targeted attacks. The flaw involves an out-of-bounds write issue that could allow attackers to escape the Web Content sandbox ...
