Web-connected smart bed provider Eight Sleep revealed to be including an SSH backdoor in its beds, as well as exposing a live ...

A critical security vulnerability in Essential Addons for Elementor has been identified, potentially impacting over two ...

The high-severity privilege escalation flaw in Microsoft's website building application was disclosed and patched last week.

AccessIT Group, a trusted provider of specialized cybersecurity services and solutions, is excited to announce the launch of ...

Security researchers find high-severity flaw in popular WordPress plugin It allowed threat actors to run malicious code ...

The US cybersecurity giant says hackers are exploiting the high-severity flaw to break into unpatched customer networks.

A vulnerability in Cisco's video codec OpenH264 allows attackers to smuggle in malicious code. Firefox is also at risk.

A vulnerability in Winzip allows attackers to inject arbitrary code with manipulated archives. An update corrects this.

Microsoft patches two critical flaws in Bing and Power Pages, including CVE-2025-21355, an actively exploited RCE ...

PostgreSQL SQL injection flaw (CVE-2025-1094) exploited alongside BeyondTrust zero-day, enabling arbitrary code execution.

CISA has added a Craft CMS flaw tracked as CVE-2025-23209 to its Known Exploited Vulnerabilities (KEV) catalog.