A developer-targeting campaign leveraged malicious Next.js repositories to trigger a covert RCE-to-C2 chain through standard ...

Critical CVE-2026-2329 flaw in Grandstream GXP1600 VoIP phones enables unauthenticated RCE, call interception, and credential ...

Enterprises relying on Gladinet’s file-sharing services are faced with another round of zero-day patching, this time to block attackers from abusing cryptographic keys directly baked into its ...

Google has released an emergency update to patch an actively exploited zero-day—the first Chrome zero-day of the year.

Google released a Chrome security update fixing two high-severity flaws that could enable code execution or crashes via malicious websites.