High-severity CVE-2025-14847 allows unauthenticated attackers to read uninitialized heap memory in MongoDB due to a zlib ...

A critical LangChain Core vulnerability (CVE-2025-68664, CVSS 9.3) allows secret theft and prompt injection through unsafe ...

Picture the scenario: you log into your vulnerability management dashboard on a Monday morning. The scan ran overnight, and the report lights up with a dozen new high-severity CVEs. One stands out ...

Atlassian has released updates for Bamboo, Bitbucket, Confluence, Crowd, Fisheye/Crucible, and Jira to patch 29 ...

Threat actors are chaining CVE-2025-40602, a fresh SonicWall zero-day, with CVE-2025-23006 for unauthenticated remote code ...

This is a use-after-free vulnerability in WebKit that may result in arbitrary code execution when processing maliciously crafted web content. The specific CVSS score for this vulnerability has not ...

Microsoft has patched an ASP.NET Core vulnerability with a CVSS score of 9.9, which security program manager Barry Dorrans said was "our highest ever." The flaw is in the Kestrel web server component ...

Aram Hovespyan, co-founder and CEO of security biz Codific, says that the rating systems for identifying security vulnerabilities and assessing threat risk need to be overhauled.… Having examined the ...

Veeam has released security updates for several of its products as part of a single September 2024 security bulletin that addresses 18 high and critical severity flaws in Veeam Backup & Replication, ...

Rising tide of vulnerabilities requires fresh approaches to risk mitigation. A sound security foundation, broad asset oversight, and threat intelligence supported by context can help. A recent funding ...