Guarding the Digital Frontier
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability affecting Commvault’s Command Center to its Known Exploited Vulnerabilities (KEV) catalog, following confirmed reports of active exploitation.…
A medium-severity vulnerability in Microsoft Windows, identified as CVE-2025-24054, is currently under active exploitation, enabling attackers to steal NTLM credentials through minimal user interaction. The U.S. Cybersecurity and Infrastructure Security…
In September 2024, NVIDIA addressed a critical vulnerability in its Container Toolkit, identified as CVE-2024-0132, which had a CVSS score of 9.0. This Time-of-Check Time-of-Use (TOCTOU) flaw allowed specially crafted…
A critical security vulnerability identified as CVE-2025-24813 has been discovered in Apache Tomcat, a widely used open-source Java servlet container. This flaw is actively being exploited in the wild, allowing…
Apple has rolled out an urgent security update to patch a zero-day vulnerability in WebKit (CVE-2025-24201), which has been actively exploited in the wild. This flaw, found in the Safari…
Broadcom has released critical security updates to address three actively exploited vulnerabilities affecting VMware ESXi, Workstation, and Fusion products. These vulnerabilities could lead to code execution and information disclosure, posing…
In a significant discovery that highlights the evolving threat landscape for macOS users, Microsoft recently unveiled a critical vulnerability in Apple’s macOS that could have allowed malicious actors to bypass…
In a recent cybersecurity development, Chinese threat actors have been exploiting a zero-day vulnerability in Fortinet’s FortiClient Windows VPN client to steal user credentials. This vulnerability allows attackers to extract…
In a recent cyberattack, the Chinese state-sponsored hacking group APT41 targeted the gambling industry, focusing on financial gain and espionage. The intrusion, which lasted for nine months, showcased the group’s…
Introduction In an era where cybersecurity threats are increasingly sophisticated, security engineers must remain vigilant and informed about the latest vulnerabilities that could jeopardize organizational security. One of the recent…