Bug Bounty

SinoTrack GPS Devices Vulnerable to Remote Vehicle Control via Default Passwords

Zero-Click AI Vulnerability Exposes Microsoft 365 Copilot Data Without User Interaction

Apple Zero-Click Flaw in Messages Exploited to Spy on Journalists Using Paragon Spyware

Multiple GitLab Vulnerabilities Expose Users to Complete Account Takeover Risks

Acer Control Center Flaw Lets Attackers Run Malicious Code as Elevated User

Windows Task Scheduler Vulnerability Allows Attackers to Gain Elevated Privileges

CVE-2025-4231 PAN-OS: Authenticated Admin Command Injection Vulnerability in the Management Web Interface

SECURITY BULLETIN: June 2025 for Trend Micro Apex One

Zero-Day Vulnerability in Windows SMB Client Exploited via Reflective Kerberos Relay Attack

Windows Disk Cleanup Tool Vulnerability: PoC Exploit Now Public

Critical Weakness In OpenPGP.js Enables Forged Signature Authentication

Graphite Spyware Uses iOS Zero-Click Vulnerability to Target Journalists

Amazon Cloud Cam Vulnerability Exposed Users to Network Traffic Interception

CVE-2025-26685 – Spoofing to Elevate Privileges with Microsoft Defender for Identity

Spring Framework Flaw Enables Remote File Disclosure via “Content‑Disposition” Header

Critical Android Security Update Addresses Privilege Escalation Vulnerabilities

New Mirai Botnet Variant Exploits TBK DVR Vulnerability to Deploy Malicious Code

IoT SecurityNissan Leaf Hacked for Remote Spying, Physical Takeover

Risk ManagementCode Execution Flaws Haunt Adobe Acrobat Reader, Adobe Commerce

Microsoft Windows WebDAV 0-Day RCE Vulnerability Actively Exploited in The Wild

Google Vulnerability Allowed Hackers to Access User Phone Numbers

Critical SOQL Injection 0-Day Vulnerability in Salesforce Affects Millions Worldwide

CISA Issues Alert on Erlang/OTP SSH Server RCE Vulnerability Under Active Exploitation

Two Botnets, One Flaw: Mirai Spreads Through Wazuh Vulnerability

Vulnerability in DanaBot Malware C2 Server Leaks Threat Actor Usernames and Crypto Keys