RSS
Threat Research
Microsoft Office
vulnerability
advisory
Microsoft Office vulnerability (CVE-2026-21509) in active exploitation
Featured
react2shell
React2Shell flaw (CVE-2025-55182) exploited for remote code execution
featured
Windows Server Update Services
WSUS
Windows Server Update Services (WSUS) vulnerability abused to harvest sensitive data
Naked Security
Patch Tuesday
Zero-day
Microsoft Patch Tuesday: 74 CVEs plus 2 “Exploit Detected” advisories
Firefox
security fix
Firefox fixes a flurry of flaws in the first of two releases this month
Apple
Exploit
triangulation
Apple ships that recent “Rapid Response” spyware patch to everyone, fixes a second zero-day
XSS
Zimbra
Zimbra Collaboration Suite warning: Patch this 0-day right now (by hand)!
Rapid Security Response
Apple silently pulls its latest zero-day update – what now?
0 day
CVE-2023-37450
webkit
Urgent! Apple fixes critical zero-day hole in iPhones, iPads and Macs