Three proof-of-concept exploits are being used in active attacks against Microsoft’s built-in security platform; two are unpatched.
Advisoryloom Editor
A cautionary tale illustrates why the person negotiating should never be involved with any part of the...
A newly discovered malware called Lotus Wiper has been used in a targeted destructive attack against the...
A new Kyber ransomware operation is targeting Windows systems and VMware ESXi endpoints in recent attacks, with...
Cybersecurity researchers have flagged a fresh set of packages that have been compromised by bad actors to...
A North Korea-linked threat group is quietly getting hired by real companies. Jasper Sleet, a threat actor...
Project: Drupal core Date: 2026-April-15 Security risk: Moderately critical 14 ∕ 25 AC:Complex/A:Admin/CI:All/II:All/E:Theoretical/TD:Uncommon Vulnerability: Gadget Chain Affected versions: >=...
Project: Drupal core Date: 2026-April-15 Security risk: Moderately critical 13 ∕ 25 AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:Default Vulnerability: Cross-site scripting Affected versions: >=...
High Severity Description An improper authorization vulnerability in scoped user-to-server (ghu_) token authorization in GitHub Enterprise Server...
Critical Severity Description A server-side request forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed...