Application Security

Microsoft Faces Criticism Over Unresolved .NET Vulnerability
Application Security
Microsoft Faces Criticism Over Unresolved .NET Vulnerability
Researchers identified a .NET security flaw impacting enterprise-grade solutions, urging a fix. Despite discovering the vulnerability, Microsoft has chosen not to address the issue, leading ...
NET Framework Vulnerability SOAPwn Impact on Enterprise Applications
Application Security
.NET Framework Vulnerability SOAPwn: Impact on Enterprise Applications
A new vulnerability dubbed SOAPwn has been discovered within the .NET Framework, posing significant risks to enterprise applications by potentially enabling remote code execution. Several ...
Fortinet Releases Fixes for Critical Vulnerabilities Affecting FortiOS and Other Products
Application Security
Fortinet Releases Fixes for Critical Vulnerabilities Affecting FortiOS and Other Products
Fortinet addresses critical vulnerabilities in FortiOS and associated products with new security updates. These weaknesses could allow attackers to bypass the FortiCloud Single Sign-On (SSO) ...
Adobe's Comprehensive Security Update Targets Massive Vulnerabilities Array
Application Security
Adobe’s Comprehensive Security Update Targets Massive Vulnerabilities Array
Adobe released a security update fixing nearly 140 vulnerabilities, prominently targeting cross-site scripting (XSS) vulnerabilities in its Experience Manager. This extensive fix demonstrates the company’s ...
Microsoft Enhances PowerShell Security With Script Warning Functionality
Application Security
Microsoft Enhances PowerShell Security With Script Warning Functionality
Microsoft has integrated a new security feature into Windows PowerShell, alerting users when scripts utilizing the Invoke-WebRequest cmdlet to download web content are run. This ...
Google Introduces Layered Defenses in Chrome to Combat Prompt Injection Vulnerabilities
Application Security
Google Introduces Layered Defenses in Chrome to Combat Prompt Injection Vulnerabilities
Google enhances Chrome's security with new features targeting prompt injection vulnerabilities. The update focuses on challenges posed by untrusted web content.
Storm-0249 Exploits EDR and Windows Tools for Ransomware Prep
Application Security
Storm-0249 Exploits EDR and Windows Tools for Ransomware Prep
Initial Access Broker Storm-0249 exploits Endpoint Detection and Response (EDR) solutions and Windows utilities to load malware, establish communication channels, and maintain persistence, all to ...
IDEsaster Uncovering Security Flaws in AI-Powered IDEs
Application Security
IDEsaster: Uncovering Security Flaws in AI-Powered IDEs
In an alarming revelation, over 30 security vulnerabilities in AI-powered Integrated Development Environments (IDEs) have been uncovered, potentially impacting countless developers. The collective vulnerabilities have ...
Chinese Hackers Exploit VMware vSphere with Brickstorm Malware CISA's Critical Alert
Application Security
Chinese Hackers Exploit VMware vSphere with Brickstorm Malware: CISA’s Critical Alert
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning to network defenders concerning Chinese threat actors using Brickstorm malware to compromise VMware vSphere ...
Microsoft Silently Patches Long-Exploited Windows Vulnerability
Application Security
Microsoft Silently Patches Long-Exploited Windows Vulnerability
Microsoft discretely resolves CVE-2025-9491, a critical Windows Shortcut vulnerability exploited by hackers for years. November 2025 Patch Tuesday delivers the fix.