Researchers at Cyera found six vulnerabilities in protobuf.js, including a flaw that can turn attacker-controlled schema data into executable code and expose downstream software supply chains. A ...

Researchers have discovered two vulnerabilities in the widely used Cursor AI-enabled integrated development environment (IDE) ...

Update: Added statement from Microsoft to the end of this article. A security researcher has released a new Microsoft Defender zero-day exploit named "RoguePlanet" just hours after Microsoft fixed two ...

Infosecurity spoke with the researcher who dumped over 30 proof-of-concept exploits without disclosing the vulnerabilities ...

Researcher Devashri Datta introduces AIVEX and SRIL, new approaches designed to bring context-aware risk analysis to software ...

Cybersecurity experts from Google's Threat Intelligence Group have alerted that the hacking group ShinyHunters exploited a significant vulnerability in Oracle PeopleSoft to target over 100 ...

The UK’s healthcare sector is being “stress-tested to breaking point," with a tenfold increase in attacks during January-May ...

The semiconductor company AMD operates a product security bug bounty program that awards up to $30,000 to security researchers who report a discovered vulnerability within AMD's products. But when a ...

The latest Patch Tuesday update for Windows 11 is among the heaviest in recent memory, bringing a new low-latency mode for smoother system navigation in addition to new features and hundreds of bug ...

Veeam released a patch for a 9.9/10 severity flaw that can lead to RCE It was found in Veeam Backup & Restoration The bug only works on installations joined to a domain Veeam released a patch for a ...

Microsoft details a newly discovered wormlike infostealer called Crypto Clipper.