Application Security

Fortinet Releases Fixes for Critical Vulnerabilities Affecting FortiOS and Other Products
Application Security
Fortinet Releases Fixes for Critical Vulnerabilities Affecting FortiOS and Other Products
Fortinet addresses critical vulnerabilities in FortiOS and associated products with new security updates. These weaknesses could allow attackers to bypass the FortiCloud Single Sign-On (SSO) ...
Adobe's Comprehensive Security Update Targets Massive Vulnerabilities Array
Application Security
Adobe’s Comprehensive Security Update Targets Massive Vulnerabilities Array
Adobe released a security update fixing nearly 140 vulnerabilities, prominently targeting cross-site scripting (XSS) vulnerabilities in its Experience Manager. This extensive fix demonstrates the company’s ...
Microsoft Enhances PowerShell Security With Script Warning Functionality
Application Security
Microsoft Enhances PowerShell Security With Script Warning Functionality
Microsoft has integrated a new security feature into Windows PowerShell, alerting users when scripts utilizing the Invoke-WebRequest cmdlet to download web content are run. This ...
Google Introduces Layered Defenses in Chrome to Combat Prompt Injection Vulnerabilities
Application Security
Google Introduces Layered Defenses in Chrome to Combat Prompt Injection Vulnerabilities
Google enhances Chrome's security with new features targeting prompt injection vulnerabilities. The update focuses on challenges posed by untrusted web content.
Storm-0249 Exploits EDR and Windows Tools for Ransomware Prep
Application Security
Storm-0249 Exploits EDR and Windows Tools for Ransomware Prep
Initial Access Broker Storm-0249 exploits Endpoint Detection and Response (EDR) solutions and Windows utilities to load malware, establish communication channels, and maintain persistence, all to ...
IDEsaster Uncovering Security Flaws in AI-Powered IDEs
Application Security
IDEsaster: Uncovering Security Flaws in AI-Powered IDEs
In an alarming revelation, over 30 security vulnerabilities in AI-powered Integrated Development Environments (IDEs) have been uncovered, potentially impacting countless developers. The collective vulnerabilities have ...
Chinese Hackers Exploit VMware vSphere with Brickstorm Malware CISA's Critical Alert
Application Security
Chinese Hackers Exploit VMware vSphere with Brickstorm Malware: CISA’s Critical Alert
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning to network defenders concerning Chinese threat actors using Brickstorm malware to compromise VMware vSphere ...
Microsoft Silently Patches Long-Exploited Windows Vulnerability
Application Security
Microsoft Silently Patches Long-Exploited Windows Vulnerability
Microsoft discretely resolves CVE-2025-9491, a critical Windows Shortcut vulnerability exploited by hackers for years. November 2025 Patch Tuesday delivers the fix.
Application Security
Microsoft Investigates Defender XDR Portal Access Disruptions
Microsoft faces a challenge as users report limited access to the Defender XDR portal. For over 10 hours, customers have experienced obstacles accessing key features, ...
ShadyPanda Malware Exploits Browser Extensions for Mass Infiltration
Application Security
ShadyPanda Malware Exploits Browser Extensions for Mass Infiltration
ShadyPanda malware campaign has quietly infiltrated over 4.3 million installations of Chrome and Edge browser extensions. It deceived users by masquerading as legitimate tools, allowing ...