An active exploitation campaign targeting FortiGate firewalls, in which attackers weaponize a critical vulnerability to plant ...

Microsoft 365 phishing MFA bypass platform BigBear 2.0 compromised 258 organizations across 40+ countries by using custom JavaScript to disable FIDO2 hardware key authentication before stealing authen ...

Jellyfin has released version 12.0, introducing multiple security fixes that address unauthorized file-access risks, ...

Attackers persuade employees to accept a remote-control request during screen sharing or to open Quick Assist and provide its ...

Jellyfin 12.0 security fixes block crafted requests reaching files outside served directories, drop legacy client logins, and ...

HAProxy backdoor attributed to North Korea ran undetected inside two South Korean organizations for nine to ten months, using ...

JSCeal hides crypto-stealing malware in V8 bytecode, but researchers built a tool to decompile it and expose its advanced ...

JSCeal can steal browser credentials, replay Google sessions using stolen cookies, and modify traffic for cryptocurrency ...

Learn how to test CDN performance from the command line using curl and dig. Measure TTFB, DNS latency, cache hits vs misses, ...

Cloudflare is also the most popular DNS server provider, serving 18.1% of that market. Its email and traffic analytics services are amongst the fastest growing providers in those categories.

Attackers are exploiting two previously undisclosed vulnerabilities (CVE-2026-83548, CVE-2026-83549) in SonicWall SMA 1000 ...