Vulnerabilities & Exploits

GPU rowhammer attack researchers disclosed GPUBreach, a practical technique that flips DRAM bits from the GPU and chains the fault with an AMD driver bug to gain root …

Medusa Ransomware is increasingly leveraging unpatched vulnerabilities to gain initial access and accelerate enterprise compromise. Recent incident analyses show a clear pivot from email-led intrusion to vulnerability-driven break-ins …

QNAP vulnerabilities Pwn2Own prompted urgent action this week as QNAP released firmware updates for four flaws exploited during the contest. The issues impact QTS across numerous NAS models. …

Chrome security vulnerabilities prompted a new Google Chrome Stable channel release for Windows, macOS, and Linux, addressing multiple high-severity flaws. Administrators should deploy patches immediately. The update reduces …

iOS security vulnerabilities have been added to the CISA KEV catalog following confirmed links to the Coruna exploit kit. The listing indicates active exploitation and available patches. The …

Rockwell vulnerability exploited is driving emergency patching across industrial networks after attackers began targeting FactoryTalk View SE deployments. The flaw enables unauthorized access and possible code execution. Rockwell …

Cisco SD-WAN vulnerabilities are under active exploitation, prompting urgent patching across Catalyst SD-WAN deployments. Cisco advised customers to install fixed releases and apply mitigations immediately. The company’s alerts …

Cisco critical vulnerabilities across enterprise networking equipment has triggered urgent security patch releases from the San Jose-based technology firm. These flaws enable attackers to compromise mission-critical infrastructure, affecting …

Google Lens extension malware has emerged as a serious threat to millions of Chrome users worldwide. A previously legitimate browser extension called QuickLens, which allowed users to perform …

A Claude AI cyberattack has exposed significant vulnerabilities in how artificial intelligence tools can be exploited by threat actors to develop and deploy malicious software. Mexican government agencies …