Unpatched Microsoft Defender flaw lets hackers gain admin access

A security researcher has published a working exploit for a Microsoft Defender security flaw that affects Windows 10, 11, and ...
Decrypt

Polkadot-Ethereum Bridge Hack Losses Were 10x Worse Than Reported, Team Admits

Polkadot bridge protocol Hyperbridge said losses from this week's hack were 10x worse than originally reported, tallying ...
Graham Cluley

Smashing Security podcast #463: This AI company leaked its own code. It’s also built something terrifying

A hacking group claims to have broken into the flood defence system protecting Venice’s Piazza San Marco – and is offering to ...
SecurityWeek

Exploited Vulnerability Exposes Nginx Servers to Hacking

A critical Nginx UI vulnerability that allows attackers to take full control of servers has been exploited in the wild.
CSO Online

Patch windows collapse as time-to-exploit accelerates

AI and the industrialization of cybercrime are helping attackers double the number of high- and critical-severity known ...
Asia News Network

Pakistan’s computer emergency response team warns ‘hostile actors’ could exploit supply chains to target national infrastructure

ISLAMABAD – The advisory highlights that even minor lapses during the delivery of hardware and software could trigger large-scale system failures. The alert comes amid growing global concern over ...
Bleeping Computer

Max severity Ubiquiti UniFi flaw may allow account takeover

Ubiquiti has patched two vulnerabilities in the UniFi Network Application, including a maximum-severity flaw that may allow attackers to take over user accounts. The UniFi Network app (also known as ...
Healthcare IT News

How attackers behave in active cyber espionage campaigns

Researchers who recorded 44.5 million connection attempts originating from 372,800 unique source IPs last year said the scale and diversity of internet-facing exploits reveal how modern threat actors ...
TechRepublic

Hackers Used New Exploit Kit to Compromise Thousands of iPhones

Hackers Used New Exploit Kit to Compromise Thousands of iPhones Your email has been sent An iOS exploit framework has revealed how advanced mobile attack tools can move rapidly from surveillance ...
IEEE

Transferable Backdoor Attack on Any CLIP Model With Any Target Class by Pre-Trained Hack Network

Abstract: CLIP has promoted miscellaneous models and downstream applications, creating a great family in the deep learning community. Recently, the security of CLIP has become an increasingly popular ...
GitHub

freepbx_firmware_file_upload.rb

The FreePBX versions prior to 16.0.44,16.0.92 and 17.0.6,17.0.23 are vulnerable to multiple CVEs, specifically CVE-2025-66039 and CVE-2025-61678, in the context of this module. The versions before ...
Network World

Four new vulnerabilities found in Ingress NGINX

Four security vulnerabilities have been found in the open source Ingress NGINX traffic controller that is extensively used by organizations in Kubernetes deployments. They can only be fixed by ...