As they work to fend off the rapidly expanding number of attempts by threat actors to exploit the dangerous React2Shell vulnerability, security teams are learning of two new flaws in React Server ...

Threat actors have shifted behaviors, refined their tooling and adapted tactics; here's what you need to know.

Public-facing instances of ProjectSend, an open-source file-sharing web application, have been exploited by attackers, according to vulnerability intelligence provider VulnCheck. ProjectSend was ...

VulnCheck found a bug being actively exploited in ProjectSend Crooks are using it to create rogue accounts and deploy malware Thousands of instances are at risk, experts warn Researchers have warned ...

In a somewhat chilling revelation, AI agents were able to find and exploit known vulnerabilities, but only under certain conditions, which researchers say indicates they're not close to being a ...

It's a straight forward unauthenticated command injection vulnerability in a Fortinet product. Seems like it would be a good add to the framework. I tried downloading a demo of the product without ...

Cybersecurity researchers have discovered a new campaign that's exploiting a recently disclosed security flaw in Fortinet FortiClient EMS devices to deliver ScreenConnect and Metasploit Powerfun ...

A critical vulnerability in Apache ActiveMQ, identified as CVE-2023-46604, has been exposed, revealing an active exploitation scenario by the notorious Kinsing malware. According to an advisory ...

Zyxel has fixed critical firewall vulnerabilities that could have allowed threat actors to gain full access to devices and the internal corporate networks they are designed to protect. The company ...