A vulnerability in DoorDash's systems could allow anyone to send "official" DoorDash-themed emails right from company's ...

Grafana Labs is warning of a maximum severity vulnerability (CVE-2025-41115) in its Enterprise product that can be exploited ...

Kendra Albert gave an excellent talk at USENIX Security this year, pointing out that the legal agreements surrounding vulnerability disclosure muzzle researchers while allowing companies to not fix ...

Chrome has suffered two other confirmed zero days in the V8 engine in 2025, from a tally of seven across Chrome as a whole. The V8 flaws were CVE-2025-5419 in June and CVE-2025-10585 in September.

The manufacturer of computer peripherals Logitech experienced an IT security incident. Attackers were able to access internal ...

CISA has ordered agencies to patch the FortiWeb web application firewall within seven days after news of exploits emerged.

Browser security firm SquareX claims to have found a potentially critical vulnerability in Perplexity’s Comet AI browser.

SolarWinds this week announced patches for three critical vulnerabilities found in its Serv-U enterprise file transfer ...

Another vulnerability (CVE-2025-31649) with a threat level of “ high ” can allow unauthorized access. The reason for this is ...

CERT-In warns of multiple high-risk security vulnerabilities in Zoom apps, urging users to apply urgent updates.

Microsoft has acknowledged the vulnerability and has successfully deployed security patches to address the flaw, so make sure ...

A new CERT-In warning flags a critical security flaw in select Asus DSL routers that could let remote attackers bypass ...