Any D-Link DIR-878 still in service now carries a critical, remotely exploitable flaw that its maker is not going to patch.

N-able takes hosted N-central offline and urges on-premises shutdowns after 30-plus Able2Shell flaws expose credentials and ...

A major security situation is unfolding for N-able after a researcher dropped 33 zero-day vulnerabilities at once for its ...

Midnight Blue researcher Carlo Meijer found six stack-based buffer overflows in Danfoss AK-SM800A firmware 5.3.2 during a one ...

The Software Safety Institute (SSI), a new independent public-interest nonprofit, today announced its launch to address the systemic conditions that allow preventable harm from unsafe and insecure ...

Neo, the AI security control platform, today announced that Neoverse autonomous software research agents identified an exploitable vulnerability in Zoom despite it being patched earlier this year. The ...

Samsung November 2026 security update began reaching the Galaxy S26 Ultra and Galaxy Z Fold 8 series in South Korea, but ...

Apache fixed CVE-2026-119618, a critical HTTP/2 flaw reported by Anthropic and Google that could enable unauthenticated code execution.

A newly disclosed six pre-authentication stack-based buffer overflows in the Danfoss AK-SM800A refrigeration controller in ...

Microsoft patched a Windows Active Directory vulnerability enabling authorized attackers to execute code remotely on affected systems.

Apache has fixed a critical bug in its HTTP/2 module that could let a remote attacker run code on a web server. The flaw is ...

SonicWall has warned that an authentication enforcement flaw in SonicOS SSLVPN could let attackers bypass SAML authentication ...