news

A severe flaw in ASP.NET Core, tracked as CVE-2026-40372, has been patched by Microsoft, potentially allowing attackers to gain SYSTEM privileges. The vulnerability stems from an improper verification of cryptographic si

A recent security incident highlights how the interconnected nature of modern applications, particularly those involving AI agents, can create significant security blind spots, leading to the exposure of sensitive creden

A newly identified data wiper, dubbed Lotus Wiper, has been employed in targeted attacks against Venezuela's energy and utilities infrastructure, leaving systems inoperable without any ransom demands. Published: 2026-04-

Federal agencies face strict deadlines to patch critical security flaws actively exploited by threat actors, as CISA adds new vulnerabilities to its Known Exploited Vulnerabilities catalog. Published: 2026-04-21 | Author

A sprawling botnet linked to the SystemBC proxy malware has revealed over 1,570 victims of the "The Gentlemen" ransomware-as-a-service (RaaS) operation, indicating a significantly larger scale of activity than previously

A newly disclosed suite of 22 security flaws, dubbed BRIDGE:BREAK, impacts thousands of Lantronix and Silex devices, potentially allowing attackers to seize control of connected industrial systems and manipulate critical