Defenders across the world face the burden of responding to yet another botched code-execution vulnerability, this time in ...

CL-UNK-1211 targets government Linux servers using AI-assisted scripts, PHP web shells, and SysGoRAT to steal credentials and ...

Langflow 1.13.0 fixes two critical flaws that could let unauthenticated attackers bypass authentication or remotely execute ...

CVE-2026-97631 targets EDK II's PXE driver, letting attackers execute code before Secure Boot loads. Patch status varies by ...

Dark Souls 2 and Dark Souls 3 servers are offline across all platforms after FromSoftware discovers an issue affecting their ...

A critical bug in open-source EDK II firmware lets a remote attacker run code on a machine before the operating system starts ...

Government and state-affiliated Linux infrastructure was targeted in a cyber espionage campaign that combined custom malware, web shells and suspected ...

More than 11,300 GitLab instances remain vulnerable to CVE-2026-110264, a flaw that allows attackers to execute code remotely ...

A malicious version of the Claude Code extension reportedly contained hidden code capable of opening remote access to ...

A 9.5/10 flaw will take months to fully remediate.

GitLab has released urgent security updates to fix a critical vulnerability that could allow attackers to execute arbitrary code on affected servers without logging in.