Critical n8n flaw CVE-2025-68668 allows authenticated users to run system commands via workflows; affects versions 1.0.0 to ...

A critical MongoDB flaw, CVE-2025-14847, is under active exploitation, allowing unauthenticated data leaks from 87,000+ ...

Microsoft has pushed back against claims that multiple prompt injection and sandbox-related issues raised by a security ...

In the SSD management software Samsung Magician, attackers can exploit a vulnerability to escalate their privileges.

In the UniFi Protect Application, attackers can exploit vulnerabilities for unauthorized access to cameras and DoS attacks.

The flaw is tracked as CVE-2025-54957 and its existence came to light in October 2025 after it was discovered by Google ...

Hackers are exploiting CVE-2025-14847, aka MongoBleed, a MongoDB vulnerability, to leak sensitive information from server ...

The vulnerability, tracked as CVE-2025-68664 and dubbed “LangGrinch,” has a Common Vulnerability Scoring System score of 9.3.

IBM urged customers to patch a critical authentication bypass vulnerability in its API Connect enterprise platform that could ...

Business-grade email server software SmarterMail just patched a maximum-severity vulnerability that allowed threat actors to ...

The source of the account reset appears to be a site vulnerability that allows a third party to wipe accounts and change ...

Password theft, by the billion, has been in the news recently, as has Microsoft’s desire to replace the security measure for all users. Security experts have now warned that a vulnerability impacting ...