Microsoft said it observed a threat actor known as Storm-2460 abuse a use after free flaw in Windows Common Log File System ...

There are several critical fixes for CISOs to worry about — and why were Microsoft patches later than expected?

This zero-day flaw is a privilege escalation bug in the Windows Common Log File System that can be exploited in order to ...

Microsoft Threat Intelligence Center (MSTIC) and Microsoft Security Response Center (MSRC) have discovered post-compromise ...

Google patched two critical zero-day vulnerabilities in Android to prevent remote attacks. One of the vulnerabilities allowed ...

CVE-2025-29824 exploited via PipeMagic malware escalated SYSTEM privileges, leading to targeted ransomware attacks.

Among the most critical fixes is the resolution of an actively exploited zero-day vulnerability in the Windows Common Log ...

An urgent warning has been issued to all Android users and it's 'absolutely essential' that the latest system update is ...

Hackers exploited a vulnerability in Gladinet CentreStack's secure file-sharing software as a zero-day since March to breach ...

EncryptHub, a notorious threat actor linked to breaches at 618 organizations, is believed to have reported two Windows ...

Google patched two serious Android zero-day vulnerabilities exploited by hackers, including one used against a Serbian ...

CVE-2025-0282, a critical vulnerability that affects Ivanti’s Connect Secure, Policy Secure and ZTA Gateway products, was ...