Exposed: Zero-Click RCE Vulnerability in Claude Desktop Extensions Puts Over 10,000 Users at Risk
A critical zero-click RCE vulnerability in Claude Desktop Extensions exposes over 10,000 users to remote attacks via a malicious Google…
ToolShell Exploitation of SharePoint Vulnerabilities: Threat Landscape, Detection, and Mitigation
A critical zero-day exploit chain named ToolShell is actively targeting on-premises SharePoint servers, enabling remote code execution and persistent access.…
Fortinet Patches Critical SQL Injection Vulnerability in FortiWeb (CVE-2025-25257)
Fortinet has released a critical security patch for FortiWeb addressing CVE-2025-25257, a high-severity SQL injection vulnerability that allows unauthenticated attackers…
Windows Remote Desktop Services Vulnerability Allows Remote Code Execution
A critical Windows Server vulnerability (CVE-2025-32710) allows unauthenticated remote code execution via RD Gateway. Organizations must patch immediately to prevent…
VMware Urges Immediate Update to Fix Critical RCE Vulnerability in vCenter Server (CVE-2024-38812)
VMware has released crucial updates to fix a critical RCE vulnerability (CVE-2024-38812) in vCenter Server. The flaw, caused by a…
CISA Warns of Critical Remote Code Execution Vulnerability Actively Exploited in FortiOS Devices
A critical remote code execution vulnerability (CVE-2024-23113) in Fortinet's FortiOS has been actively exploited by attackers, allowing them to execute…
Google Patches Critical Android Zero-Day CVE-2024-36971 in August Update
Google's August 2024 Android security update addresses 46 vulnerabilities, including the critical CVE-2024-36971 zero-day flaw actively exploited in targeted attacks.…
Urgent Security Update: New Critical OSGeo GeoServer Vulnerability CVE-2024-36401 Added to CISA Exploited Catalog
CISA adds CVE-2024-36401 to its Known Exploited Vulnerabilities Catalog, highlighting a critical GeoServer vulnerability allowing remote code execution. Update GeoServer…
Microsoft Issues Patches for 51 Flaws, Including Critical MSMQ Vulnerability
Microsoft's June Patch Tuesday fixes 51 vulnerabilities, including a Critical MSMQ flaw (CVE-2024-30080) with a CVSS score of 9.8. The…
Google and Mozilla Swiftly Patch Critical Zero-Day Vulnerabilities Exposed at Pwn2Own 2024
Google and Mozilla rapidly addressed critical zero-day flaws in Chrome and Firefox, revealed at Pwn2Own 2024. These vulnerabilities, exploited by…