Vulnerabilities

A critical examination of India's high-stakes technical examination systems reveals systemic vulnerabilities that threaten workforce integrity across engineering, cybersecurity, an...

A new report highlights outdated operating systems as a critical, often overlooked vulnerability creating systemic business risk. This threat emerges as global IT service providers...

The security of the global internet rests on the shoulders of a small, often overlooked group of individuals: the maintainers and researchers of foundational open-source software. ...

A pattern of systemic vulnerabilities in India's high-stakes technical examination systems is exposing critical flaws in credential verification processes. Multiple national testin...

A tragic accident in India's Nashik district, where a car plunged into an uncovered well killing nine family members, has triggered immediate political and regulatory responses inc...

A significant cybersecurity breach at the Los Angeles Metro has forced the shutdown of critical network systems, highlighting the escalating threats facing global transportation in...

Google has issued an emergency security update for Chrome to address a critical zero-day vulnerability, tracked as CVE-2026-5281, which is being actively exploited in the wild. Thi...

A large-scale, ongoing credential harvesting campaign is targeting hundreds of Next.js applications by exploiting a critical vulnerability tracked as CVE-2025-55182. Security resea...

In a significant departure from its standard security policy, Apple is issuing a rare software update to patch a critical vulnerability, dubbed 'DarkSword,' across multiple older v...

Apple has taken the unusual step of expanding its iOS 18.7.7 security update to additional iPhone models, breaking from its typical update cadence to address the persistent DarkSwo...

Apple is executing an unprecedented security policy reversal by backporting critical patches to iOS 18 to address the DarkSword exploit, breaking its long-standing practice of focu...

A sophisticated software supply chain attack has successfully compromised the widely-used Axios NPM library, a fundamental HTTP client component embedded in millions of web applica...

Severe budget crises and political infighting within national education departments are creating systemic cybersecurity risks that extend far beyond the classroom. Recent controver...

Apple has initiated an unprecedented, aggressive campaign to warn users of outdated iPhones and iPads about active security threats. The company is deploying persistent lock screen...

Security researchers have identified a critical zero-day vulnerability in the Telegram messaging platform, assigned a near-maximum severity score of 9.8 out of 10 on the CVSS v3.1 ...

The Russian state-sponsored threat actor tracked as TA446, also known as Callisto, has been observed deploying the recently leaked 'DarkSword' iOS exploit kit in a sophisticated sp...

Two critical vulnerabilities (CVSS 9.3) in major enterprise networking appliances—Citrix NetScaler and F5 BIG-IP APM—are under active reconnaissance and exploitation by threat ...

A new information-stealing malware dubbed 'VoidStealer' is exploiting a critical weakness in Google Chrome's Application Bound Encryption (ABE) to extract passwords and sensitive d...

The cybersecurity landscape is undergoing a seismic shift as autonomous penetration testing tools, powered by advanced AI, dramatically accelerate the vulnerability exploitation ti...

A recent security simulation has revealed alarming vulnerabilities in the U.S. power grid to coordinated drone attacks, highlighting a critical gap in physical infrastructure prote...