AI Apps at Risk due to LangChain Vulnerability
A newly disclosed critical security vulnerability in the LangChain Core framework — a foundational component used to build applications powered…
React2Shell Exploits Surge as Critical React Server Component Flaw Fuels Crypto Miners and New Linux Malware Outbreak
A critical security flaw in React Server Components, dubbed React2Shell and tracked as CVE-2025-55182, continues to be aggressively exploited in…
Sneeit WordPress RCE Under Active Attack by Hackers
As of early December 2025, dozens of WordPress websites using the Sneeit Framework plugin are under active attack due to…
Oracle Patches Critical Flaw Exploited by Cl0p in Data Theft Campaign
Oracle has issued an emergency patch for a critical zero-day vulnerability (CVE-2025-61882) that was actively exploited by the Cl0p ransomware…
CISA Flags Active Exploitation of Linux Kernel Privilege Escalation Bug
On June 18, 2025, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) officially added the Linux kernel vulnerability CVE‑2023‑0386 to…
Google Issues Emergency Patch for Actively Exploited Chrome Zero-Day Vulnerability
Google has released an emergency out-of-band update to address a critical zero-day vulnerability in its Chrome browser, identified as CVE-2025-5419.…
Mozilla Addresses Critical Zero-Day Flaws in Firefox
On May 19, 2025, Mozilla released urgent security updates for its Firefox browser, addressing two critical zero-day vulnerabilities actively exploited…
Samsung Patches CVE-2025-4632 Flaw Exploited by Mirai Botnet in MagicINFO 9 Server
Samsung has released a critical security update to patch CVE-2025-4632, a high-severity vulnerability in its MagicINFO 9 Server platform actively…
Critical SAP Vulnerability CVE-2025-31324 Exploited in Ongoing Cyberattacks
In a major cybersecurity development, several China-linked advanced persistent threat (APT) groups have been identified actively exploiting a critical vulnerability…
Critical Commvault Vulnerability Actively Exploited, Added to CISA’s KEV Catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability affecting Commvault’s Command Center to its Known…