Bug bounties have become a staple of the cyber security toolkit, offering researchers a way to get paid to find and report bugs and giving businesses a route to fix unknown flaws. However, this model ...

Google has released emergency security updates to patch two high-severity Chrome vulnerabilities exploited in zero-day ...

New research was motivated by "high-potential societal impacts" of successfully disabling autonomous drones, a study author ...

Zero-days in .NET and SQL Server, and a handful of critical RCE bugs, form the nucleus of Microsoft's March Patch Tuesday update.

Data protection company Veeam Software has patched multiple flaws in its Backup & Replication solution, including four ...

A new report out today from artificial intelligence security startup Cyata Security Ltd. details a recently uncovered critical vulnerability on langchain-core, the foundational library behind ...

A new vulnerability in GitLab’s Ultimate Enterprise Edition used for managing source code is “dangerous” and needs to be quickly patched, says an expert. The vulnerability, CVE-2025-5121, is one of 10 ...

Through clever search filters, attackers could have pieced together the addresses of all students. Manufacturer and universities reacted promptly.

Heap-based buffer overflow in Windows rated 9.8 in severity and SharePoint RCE flaw also need immediate attention. Microsoft’s July Patch Tuesday fixes are a mix of good news and bad news for CSOs: ...