A major announcement in the cybersecurity industry – VMware has confirmed the presence of three critical vulnerabilities in its ESXi, Workstation, and Fusion products. According to the official security advisory VMSA-2025-0004, attackers are already actively exploiting these vulnerabilities. These vulnerabilities,…

Google has issued an urgent security warning about two critical Android vulnerabilities identified as CVE-2024-43093 and CVE-2024-50302. These vulnerabilities are actively exploited in attacks targeting devices running Android versions 12 to 15. They allow attackers to bypass the lock screen,…

In recent years, internet-connected devices, especially routers and IoT devices, have become prime targets for cybercriminals. In response, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has recently issued a warning about a critical vulnerability in Cisco Small Business RV…

In recent years, internet-connected devices, especially IoT (Internet of Things) and consumer-grade routers, have become primary targets for cybercriminals. In 2024, scanning attacks aimed at identifying vulnerabilities worldwide increased by 91%. This rise is significantly higher than in previous years…

Recently, cybersecurity specialists have discovered three critical vulnerabilities in Extreme Networks’ IQ Engine (HiveOS) operating system. These vulnerabilities allow authenticated attackers to escalate privileges, decrypt passwords, and execute arbitrary commands. The vulnerabilities are classified as follows: Extreme Networks has released…

Cybersecurity researchers have discovered a new dangerous exploit targeting Apple iOS devices. This exploit, named Trigon, takes advantage of a critical vulnerability in the management layer of the iOS operating system. The vulnerability was first uncovered by Kaspersky and was…

Digital security is more important today than ever before. A newly discovered vulnerability in Substack’s domain management system could create new opportunities for cybercriminals. Specifically, due to improperly configured DNS records, attackers can take control of abandoned (inactive) Substack subdomains.…

In the digital world, protecting personal data has become a crucial issue. Google continues to implement new technologies in this field. Recently, an analysis of the Google Play Services v24.45.33 APK file by Android Authority revealed a new feature called…

Apache Derby is an open-source database management system fully implemented in Java, widely used in various applications and services. However, a recently discovered vulnerability, CVE-2022-46337, has put systems based on this platform at serious risk. This vulnerability allows attackers to…

In today’s world, cybersecurity is more important than ever. In this regard, Ping Identity has announced the discovery of a critical vulnerability (CVE-2025-20059) in the PingAM Java Agent software. This vulnerability allows bypassing security policies and gaining unauthorized access to…