Critical n8n v CVE-2026-25049 allows authenticated workflow abuse to execute system commands and expose server data.

Docker has released security fixes for a critical vulnerability affecting its AI-assisted feature known as Ask Gordon. The ...

Cisco and F5 have patched multiple vulnerabilities, including high-severity bugs leading to DoS conditions and command ...

CISA warns of a new SmarterTools SmarterMail vulnerability exploited by ransomware groups for unauthenticated RCE.

ClickFix uses fake CAPTCHAs and a signed Microsoft App-V script to deploy Amatera stealer on enterprise Windows systems.

CrashFix crashes browsers to coerce users into executing commands that deploy a Python RAT, abusing finger.exe and portable Python to evade detection and persist on high‑value systems.

A password management tool installed by default alongside Trend Micro AntiVirus was found vulnerable to remote code execution thanks to the work of Google's Project Zero security team. Discovered by ...

ASUS patched a bug that allowed attackers to pair two vulnerabilities to gain direct router access and execute commands as root. ASUS released patches for over a dozen router models on Tuesday that ...

Security researchers are detecting hundreds of IP addresses on a daily basis that scan or attempt to exploit Apache RocketMQ services vulnerable to a remote command execution flaw identified as ...