A critical MongoDB flaw, CVE-2025-14847, is under active exploitation, allowing unauthenticated data leaks from 87,000+ ...

IBM urged customers to patch a critical authentication bypass vulnerability in its API Connect enterprise platform that could ...

A critical LangChain Core vulnerability (CVE-2025-68664, CVSS 9.3) allows secret theft and prompt injection through unsafe ...

Hackers are exploiting CVE-2025-14847, aka MongoBleed, a MongoDB vulnerability, to leak sensitive information from server ...

Every day has the potential to be a bad day for a CSO. However, the second Tuesday of each month – Patch Tuesday – is almost ...

The insecure use of an uninstaller during the removal of JumpCloud Agent on Windows can be exploited to obtain System privileges.

The vulnerability, tracked as CVE-2025-68664 and dubbed “LangGrinch,” has a Common Vulnerability Scoring System score of 9.3.

Escape From Tarkov players report full account resets after a security vulnerability. Here's everything you need to know.

As disclosure-to-exploitation timelines compress, organizations are rethinking how they validate exploitability and ...

The BSI report on the state of IT security in Germany presents alarming figures: In 2023, the Federal Office for Information Security registered an average of 68 new vulnerabilities in software ...

As the risks of cyberattacks that are related to security vulnerabilities continuously grow and can cause huge business damage, we see DevSecOps shifting more and more toward engineering. In this ...

Cybersecurity firm Bitdefender published a report (PDF) this week detailing three security vulnerabilities it found in Wyze security cameras, leading to a flurry of criticism around both the ...