Application Security

Marimo faces a severe RCE vulnerability allowing credential theft. Immediate action is crucial.

New malicious npm packages, deceptive LNK files, and compromised servers illustrate evolving malware tactics.

Threat actors compromised the CPUID site for less than 24 hours, deploying a remote access trojan.

CISA mandates U.S. agencies to patch critical Ivanti EPMM vulnerability within four days as active exploitation continues.

Vulnerability in EngageLab SDK put Android cryptocurrency wallets at risk, bypassing security sandbox protections.

Cybercriminals hijacked the Smart Slider 3 Pro plugin update system, pushing malicious versions loaded with multiple backdoors to WordPress and

Google unveils Device Bound Session Credentials in Chrome 146 for Windows to thwart information-stealing malware.

Exchange Online access issues have affected Outlook mobile and macOS users. Microsoft is actively working on a resolution.

The expansion of Shadow AI within daily apps and outdated mobile devices increases exposure to unseen mobile vulnerabilities.