Chinese hackers are behind attacks on AsyncOS Software that allow complete takeover of the appliance, company says.

The latest update from Microsoft deals with 112 flaws, including eight the company rated critical — and three zero-day ...

An advanced threat actor tracked as UAT-8837 and believed to be linked to China has been focusing on critical infrastructure ...

Cisco patched an Email Gateway and Secure Email zero-day exploited by Chinese hackers to deploy the AquaShell backdoor.

Cisco finally patched a maximum-severity AsyncOS zero-day exploited in attacks targeting Secure Email Gateway (SEG) ...

Cisco Talos reports China-linked APT UAT-8837 targeting North American critical infrastructure via a Sitecore zero-day, ...

Cisco released fixes for CVE-2025-20393, a CVSS 10.0 zero-day RCE flaw in AsyncOS exploited by a China-linked APT via email ...

Microsoft’s January 2026 Patch Tuesday fixes 112 CVEs, including an exploited Windows DWM zero-day, plus critical flaws across SharePoint, Office, and Windows services.

A previous virtually identical zero day DoS vulnerability was targeted in the wild, and there's already a PoC for this one.

AI models are getting so good at finding vulnerabilities that some experts say the tech industry might need to rethink how ...

Microsoft has patched three zero-day vulnerabilities in the first patch Tuesday of 2026, including one under active ...

First Patch Tuesday of 2026 goes big Microsoft and Uncle Sam have warned that a Windows bug disclosed today is already under ...