Attackers
- APPLICATIONS
GitLab Duo Vulnerability Enabled Attackers to Hijack AI Responses with Hidden Prompts
Cybersecurity researchers have discovered an indirect prompt injection flaw in GitLab’s artificial intelligence (AI) assistant Duo that could have allowed…
Read More » - APPLICATIONS
Unpatched Versa Concerto Flaws Let Attackers Escape Docker and Compromise Host
May 22, 2025Ravie LakshmananVulnerability / Software Security Cybersecurity researchers have uncovered multiple critical security vulnerabilities impacting the Versa Concerto network…
Read More » - APPLICATIONS
SonicWall Patches 3 Flaws in SMA 100 Devices Allowing Attackers to Run Code as Root
May 08, 2025Ravie LakshmananNetwork Security / Vulnerability SonicWall has released patches to address three security flaws affecting SMA 100 Secure…
Read More » - APPLICATIONS
Fake Security Plugin on WordPress Enables Remote Admin Access for Attackers
May 01, 2025Ravie LakshmananMalware / Web Skimming Cybersecurity researchers have shed light on a new campaign targeting WordPress sites that…
Read More » - APPLICATIONS
Critical Commvault Command Center Flaw Enables Attackers to Execute Code Remotely
Apr 24, 2025Ravie LakshmananData Breach / Vulnerability A critical security flaw has been disclosed in the Commvault Command Center that…
Read More » - APPLICATIONS
GCP Cloud Composer Bug Let Attackers Elevate Access via Malicious PyPI Packages
Cybersecurity researchers have detailed a now-patched vulnerability in Google Cloud Platform (GCP) that could have enabled an attacker to elevate…
Read More » - APPLICATIONS
Fortinet Warns Attackers Retain FortiGate Access Post-Patching via SSL-VPN Symlink Exploit
Apr 11, 2025Ravie LakshmananNetwork Security / Vulnerability Fortinet has revealed that threat actors have found a way to maintain read-only…
Read More » - APPLICATIONS
Critical Flaw in Apache Parquet Allows Remote Attackers to Execute Arbitrary Code
Apr 04, 2025Ravie LakshmananVulnerability / Cloud Security A maximum severity security vulnerability has been disclosed in Apache Parquet’s Java Library…
Read More » - APPLICATIONS
Critical Next.js Vulnerability Allows Attackers to Bypass Middleware Authorization Checks
Mar 24, 2025Ravie LakshmananVulnerability / Web Security A critical security flaw has been disclosed in the Next.js React framework that…
Read More » - APPLICATIONS
Critical mySCADA myPRO Flaws Could Let Attackers Take Over Industrial Control Systems
Mar 19, 2025Ravie LakshmananVulnerability / Network Security Cybersecurity researchers have disclosed details of two critical flaws impacting mySCADA myPRO, a…
Read More »
