CVE-2025-8088, a WinRAR vulnerability patched in July 2025, has been widely exploited by state-sponsored threat actors and cybercriminals.

A critical-severity vulnerability in the vm2 Node.js sandbox library, tracked as CVE-2026-22709, allows escaping the sandbox and executing arbitrary code on the underlying host system.

Google confirms nation-state and cybercrime groups exploit a patched WinRAR flaw to gain persistence and deploy malware via ...

To exploit the vulnerability, an attacker would need either system access or be able to convince a user to open a malicious ...

Microsoft rushed an emergency Patch Tuesday fix after a new Office zero-day began spreading in active attacks. CISA warns ...

Knostic found 1,862 MCP servers exposed with zero authentication. Here are five actions CISOs should take now.

ESET researchers discover an Android spyware campaign targeting users in Pakistan via romance scam tactics, revealing links ...

A Microsoft zero-day vulnerability has been added to the KEV catalogue alongside the SmarterTools SmarterMail authentication ...

ClickFix uses fake CAPTCHAs and a signed Microsoft App-V script to deploy Amatera stealer on enterprise Windows systems.