A critical zero-day vulnerability in Oracle E-Business Suite (EBS) was exploited by the Cl0p ransomware group in mid-2025.

Broadcom fixed the flaw in fresh releases of VMware Cloud Foundation, vSphere Foundation, Aria Operations, Telco Cloud Platform, and VMware Tools, and noted that fixes for open-vm-tools will be ...

Microsoft links Storm-1175 to GoAnywhere flaw CVE-2025-10035, exploited since September for Medusa ransomware.

Your weekly snapshot of cyber chaos: from Oracle 0-Day exploits to fresh spyware, phishing kits, and ransomware twists—here’s ...

"There is no evidence of any exploitation of the vulnerability, nor has there been any impact on users or customers," firm ...

A critical-severity vulnerability that lingered in Redis for 13 years potentially exposes 60,000 servers to exploitation.

Critical GoAnywhere MFT vulnerability CVE-2025-10035 enables unauthenticated remote code execution, raising supply-chain attack concerns for enterprises.

A serious security flaw in widely used VMware software has been actively exploited in the wild for almost a year, with ...

Unity is a popular cross-platform game engine used to create 2D, 3D, and VR/AR games and other interactive experiences. Many ...

Fortra has released security updates to patch a maximum severity vulnerability in GoAnywhere MFT's License Servlet that can be exploited in command injection attacks. GoAnywhere MFT is a web-based ...

Pakistan’s National CERT warns of active VMware exploits. Flaws let hackers gain control. Organizations urged to patch systems immediately.

A Dune-inspired worm recently hit CrowdStrike and npm, infecting hundreds of packages. Here's what happened - and how to protect your code.