Common vulnerabilities and exposures (CVEs) include all types of subversive entry-points discovered in programs, along with a ...

The CISA KEV catalog was expanded with 245 vulnerabilities in 2025, including 24 flaws exploited by ransomware groups.

Flow published a post-incident report on January 6, 2026, discussing the root cause of its $3.9 million exploit. An attacker ...

That sounds like a high number of vulnerabilities but it's actually a fairly large drop from this time last year, which saw ...

WordPress security scanner WPScan’s 2024 WordPress vulnerability report calls attention to WordPress vulnerability trends and suggests the kinds of things website publishers (and SEOs) should be ...

The flaw had received a fix during Microsoft’s ‘Patch Tuesday’ update on Sept. 10, but had not initially been listed as exploited in attacks. A Microsoft Windows vulnerability with a rating of “high” ...

The U.S. cybersecurity agency ordered Federal Civilian Executive Branch agencies to implement fixes for the issue by end of day Friday. A critical-severity vulnerability affecting two Citrix NetScaler ...

The US top cybersecurity agency has confirmed that the critical vulnerability in file transfer solution provider CrushFTP’s product is being exploited in the wild. The authentication bypass ...

High severity vulnerability was discovered in the Elementor website builder plugin that could allow an attacker to upload files to the website server and execute them. The vulnerability is in the ...