GoDaddy launched a mass revocation of 404,607 SSL/TLS certificates after finding that issued certificates did not match its ...

Railway has disclosed a security incident in which an unauthorized third party may have accessed customer environment ...

GitLab has released urgent security updates for a critical vulnerability that could let attackers run code on self-managed ...

China-linked hackers used AI framework ARTEX to target 2,250+ Microsoft 365 tenants, exploiting stolen credentials.

A public proof-of-concept repository shares verification tools and a lab setup to test two critical PHP vulnerabilities known ...

Node.js patched 10 vulnerabilities across versions 26.x, 24.x, and 22.x, including four high-severity flaws affecting DNS, ...

PHP has released emergency security updates for two critical vulnerabilities that could let unauthenticated attackers run ...

Cloudflare says it is seeing early attempts to exploit two critical PHP vulnerabilities whose details surfaced before the PHP ...

China-linked hackers exploit trusted Windows apps to deploy backdoors, gather system data, and steal Active Directory ...

State Bank of India (SBI) has disclosed a data loss incident after a preliminary review identified 3,897 customer records ...

A public PoC exploit targets a critical Fortinet FortiSIEM flaw enabling unauthenticated remote code execution and file ...

Oracle’s October update fixes 1,295 flaws, including a critical unauthenticated E-Business Suite vulnerability.