CVE-2026-21877: Max-Severity n8n Flaw Allows Authenticated RCE
CVE-2026-21877: Max-Severity n8n Flaw Allows Authenticated RCE Open-source automation tools are widely used because they simplify complex workflows and reduce operational overhead. However, their deep...
Chrome Extensions Impersonate AI Tools to Steal ChatGPT & DeepSeek Cha...
Chrome Extensions Impersonate AI Tools to Steal ChatGPT & DeepSeek Chats A recently uncovered malware campaign involving Chrome extensions demonstrates how seemingly legitimate AI-focused add-ons ...
CVE-2025-68668: Arbitrary Command Execution in n8n Python Code Node
CVE-2025-68668: Arbitrary Command Execution in n8n Python Code Node A newly disclosed security issue in n8n, tracked as CVE-2025-68668, has drawn attention from security teams because of its severity ...
IBM API Connect Exposed to Critical Auth Bypass (CVE-2025-13915)
IBM API Connect Exposed to Critical Auth Bypass (CVE-2025-13915) A recent security vulnerability, tracked as CVE-2025-13915, affects IBM API Connect, an end-to-end API platform used to create, test, m...
MongoBleed (CVE-2025-14847): What MongoDB Users Need to Know About Thi...
MongoBleed (CVE-2025-14847): What MongoDB Users Need to Know About This Memory Leak A recently disclosed security vulnerability named MongoBleed has drawn attention across the cybersecurity community ...
WIRED Data Leak Exposes 2.3M Users Amid Broader Claims
WIRED Data Leak Exposes 2.3M Users Amid Broader Claims During the final days of December 2025, reports emerged that a large dataset linked to WIRED subscribers had been leaked on underground hacking f...
CVE-2025-68664: Critical LangChain Flaw Enables Secret Extraction
CVE-2025-68664: Critical LangChain Flaw Enables Secret Extraction A recently disclosed security issue in LangChain Core, CVE-2025-68664, has drawn attention across the AI and developer communities, pa...
Top 20 Ransomware Statistics You Should Know (2025)
Top 20 Ransomware Statistics You Should Know (2025) Ransomware continues to test the limits of organizational resilience, but the story in 2025 is no longer just about rising attack volumes. It’s abou...
CVE-2025-14733: WatchGuard Firebox RCE Vulnerability
CVE-2025-14733: WatchGuard Firebox RCE Vulnerability WatchGuard has disclosed a critical Remote Code Execution (RCE) vulnerability, CVE-2025-14733, affecting Firebox appliances running specific Firewa...
CVE-2025-68613: Critical RCE Vulnerability Disclosed in n8n Workflow A...
CVE-2025-68613: Critical RCE Vulnerability Disclosed in n8n Workflow Automation A critical security vulnerability has been identified in the n8n workflow automation platform, a widely used tool for bu...
Max-Severity RCE Patched in HPE OneView (CVE-2025-37164)
Max-Severity RCE Patched in HPE OneView (CVE-2025-37164) [Update] January 9, 2026: CISA Adds HPE OneView Bug CVE-2025-37164 to the KEV Catalog Hewlett Packard Enterprise (HPE) has recently addressed a...
CVE-2025-40602: SonicWall SMA1000 Vulnerability Actively Exploited
CVE-2025-40602: SonicWall SMA1000 Vulnerability Actively Exploited SonicWall has released security updates to address a newly disclosed vulnerability (CVE-2025-40602) affecting its Secure Mobile Acces...
CVE-2025-20393: Cisco AsyncOS Zero-Day Impacts Secure Email Appliances
CVE-2025-20393: Cisco AsyncOS Zero-Day Impacts Secure Email Appliances [Update] January 16, 2026: Security Updates for CVE-2025-20393 Released Recently, Cisco confirmed active exploitation of a previo...
CVE-2025-43529 & CVE-2025-14174: Apple and Google’s Zero-Day Patches
CVE-2025-43529 & CVE-2025-14174: Apple and Google’s Zero-Day Patches Apple has released emergency security updates to address two actively exploited zero-day vulnerabilities (CVE-2025-43529 & ...
Google Chrome Zero-Day Actively Exploited via ANGLE Graphics Component
Google Chrome Zero-Day Actively Exploited via ANGLE Graphics Component Google has released a new Chrome security update that addresses multiple vulnerabilities, including a high-severity flaw (4661920...
December 2025 Patch Tuesday: 3 Zero-Days Fixed, CVE-2025-62221 Activel...
December 2025 Patch Tuesday: 3 Zero-Days Fixed, CVE-2025-62221 Actively Exploited Microsoft has released its December 2025 Patch Tuesday updates, addressing 57 security vulnerabilities across Windows,...
November 2025: Breaches at Coupang, Balancer, Gainsight, Eurofiber & M...
November 2025: Coupang Breach, Balancer $120M Hack, Gainsight Token Abuse, Eurofiber GLPI Incident & More November 2025 brought another wide mix of high-impact cyber incidents, ranging from one of...
React2Shell: Critical RCE in React and Next.js Explained
React2Shell: Critical RCE in React and Next.js Explained [Update] October 1, 2024: “React2Shell Exploitation Now Confirmed in the Wild” A new Remote Code Execution (RCE) vulnerability, widely referred...
The Marquis Software Data Breach: What It Means For Banks, Credit Unio...
The Marquis Software Data Breach: What It Means For Banks, Credit Unions, And Their Customers U.S. regulators and media outlets confirmed a major data breach at Marquis Software Solutions, a Texas bas...
December 2025 Android Security Bulletin: Two Zero-Day Flaws Exploited
December 2025 Android Security Bulletin: Two Zero-Day Flaws Exploited Google has published the December 2025 Android Security Bulletin, addressing 100+ vulnerabilities across core platform and vendor ...