vulnerabilities

How VPN attacks, growing infrastructure complexity, and regulatory requirements are all accelerating businesses’ shift to Zero Trust Network Access.

Critical PHP vulnerabilities put millions of websites worldwide at risk, but there are still no reports of mass breaches. We discuss the attacks on PAN-OS, a flaw in Brotli, and the steps businesses need to take beyond patching.

We’ve discovered a vulnerability that could affect millions of Intelbras IP cameras. If you’ve got one — here’s how to prevent attackers from disabling it.

On October 21, two PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619) were disclosed, affecting nearly 70% of websites worldwide. But if you think this’s only an admins’ headache, read on: we explain why your photos, music, archives, games, NAS and smart-home systems may be at risk, and how to protect your data and devices.

PHP developers have released patches for two critical vulnerabilities that could allow an attacker to remotely execute arbitrary code on the server without authentication.

Microsoft’s October Patch Tuesday bulletin is breaking records again — it addresses 1,414 vulnerabilities. Here’s what you need to know.

Google has released its September security update for Pixel smartphones – fixing 110 vulnerabilities. One of the vulnerabilities appears to be being used actively in targeted attacks.

A company may regularly use a vulnerability scanner, but dangerous vulnerabilities will still remain in its infrastructure. We explain why this happens, and what to do about it.

CVE-2026-87902, a new critical vulnerability in the WordPress core, is already being actively exploited in real-world attacks.

Researchers have built a device that can interfere with critical systems aboard a Boeing 737. Here’s how the attack works, and whether it’s time you started worrying about flying yet.

We break down the file formats that can be unfamiliar to some users, and that aren’t always scanned by security solutions but can still pose cyberthreats.

Attackers have found yet another source of free computing resources: automotive head units. We take a look at the first malware specifically targeting cars for infection.

Attackers are crafting files that devices can read as two different document types at once, and using these “nesting dolls” to smuggle in malware. How to detect and neutralize these two-faced files?

Microsoft has addressed approximately 600 vulnerabilities in its products, affecting its entire product line — including even Minecraft Server and Age of Empires II. How can organizations handle such a volume?

Yarbo smart mowers were found to have a built-in remote access loophole with identical passwords across all devices. A security researcher managed to completely hijack a mower, and could even force it to… run over its owner.

How law enforcement and intelligence agencies leverage data from connected vehicles, and what your car might be leaking about you.

We’re breaking down why developers have moved into the crosshairs, the specific tactics attackers are using, and how to reduce the risks of company infrastructure being compromised.

The emergence of DarkSword and Coruna — new malware targeting iOS — shows exactly how government intelligence tools are being repurposed as weapons for cybercriminals. We break down how these attacks work, why they’re so dangerous, and what you can do to not get infected.

How the AirSnitch vulnerability family threatens corporate networks, and what changes you need to make to your network architecture and settings to stay protected.

How to manage vulnerabilities when developing or using open-source software.

How the AI boom and increasing reliance on open-source components are piling up corporate security debt — and what you can actually do about it.