Microsoft’s big December 2025 Patch Tuesday fixes 3 zero-day flaws and 57 other vulnerabilities.

Looking back on the year gone by in his monthly Patch Tuesday roundup, Dustin Childs of Trend Micro’s Zero Day Initiative ...

Google has released a Chrome security update to patch a mysterious zero-day vulnerability that is actively exploited in the ...

Multi-solution crowdsourced cyber security platform Bugcrowd says it saw growing acceptance and adoption of crowdsourced security strategies among mainstream end-user organisations in 2023, as ethical ...

A critical-severity vulnerability impacting the popular React open-source library deserves attention, but is far from the ...

A D-Link issue and an Array OS vulnerability have been added to the US cyber agency’s list of known exploited vulnerabilities ...

Multiple China-linked threat actors began exploiting the React2Shell vulnerability (CVE-2025-55182) affecting React and ...

OpenAI recently patched a Codex CLI vulnerability that can be exploited in attacks aimed at software developers.

Attackers are exploiting a critical-severity privilege escalation vulnerability (CVE-2025-8489) in the King Addons for ...

Dartmouth breach exposes 40,000+ SSNs in Cl0p’s Oracle zero-day attack. Harvard and Penn also hit. What victims should do now ...

A zero-day vulnerability found in several Qualcomm chipsets was recently exploited to target Android users. The vulnerability affects 64 chipsets, including Snapdragon SoCs, modems, and FastConnect ...