Critical Windows security flaw affects 240 million. Microsoft urges immediate patch installation to prevent data theft and system control.

Device code phishing has emerged as a particularly sophisticated attack vector, with threat actors using tools like TokenTactics to intercept Microsoft 365 tokens and gain unauthorized access to ...

Slovak cybersecurity company ESET says a newly patched zero-day vulnerability in the Windows Win32 Kernel Subsystem has been ...

Microsoft’s monthly release of security fixes addresses vulnerabilities including six flaws that are believed to be under ...

The first is CVE-2025-24993 - a heap-based buffer overflow in NTFS used by Windows Server 2008 and later systems, as well as ...

Microsoft is addressing 57 vulnerabilities this Patch Tuesday, which is a similar volume to last month. However, Microsoft has evidence of in-the-wild exploitation for as many as six of the ...

Microsoft is addressing 57 vulnerabilities this March 2025 Patch Tuesday, which is a similar volume to last month. However, ...

President Trump picks Sean Plankey as CISA director Plankey also served as part of Trump's previous administration CISA faces ...

The US Cybersecurity and Infrastructure Security Agency (CISA) has added five new flaws in Ivanti and VeraCore products to ...

Use precise geolocation data. Actively scan device characteristics for identification. Store and/or access information on a ...

One exploit being tracked, CVE-2023-20118, allows hackers to remotely "execute arbitrary commands" on certain VPN routers.

Tens of thousands of VMware ESXi instances are affected by CVE-2025-22224 and other vulnerabilities disclosed recently as ...