CISA reports active exploitation of GeoServer XXE flaw CVE-2025-58360 and directs immediate updates to secure affected systems.

Federal agencies told to fix critical XXE vulnerability (CVE-2025-58360) in GeoServer after attackers gain a head start.

There’s something immensely satisfying about taking a series of low impact CVEs, and stringing them together into a full exploit. That’s the story we have from [Mehmet Ince] of ...

Attackers are exploiting a Flight protocol validation failure that allows them to execute arbitrary code without ...

Financial institutions rely on web forms to capture their most sensitive customer information, yet these digital intake ...

MongoDB has warned IT admins to immediately patch a high-severity memory-read vulnerability that may be exploited by ...

Struggling with MCP authentication? The November 2025 spec just changed everything. CIMD replaces DCR's complexity with a ...

Discover how AI and automation strengthen defenses, streamline operations, and deliver measurable business impact. Hear from ...

Currently, attackers are targeting Windows 11 and Windows Server 2022, among others. Therefore, administrators should ensure that Windows Update is active on their systems and that the latest security ...

A new malware implant called EtherRAT, deployed in a recent React2Shell attack, runs five separate Linux persistence mechanisms and leverages Ethereum smart contracts for communication with the ...