Exim, one of the most widely deployed mail transfer agents on the internet, has released version 4.99.2,...
John
John is an independent cybersecurity researcher covering vulnerabilities, malware campaigns, and emerging threats in the cybersecurity landscape.
Wireshark, the world’s most widely deployed open-source network protocol analyzer, has released version 4.6.5, a critical security...
A high-severity authentication bypass vulnerability (CVE-2026-40912) in Traefik’s StripPrefixRegex middleware allows unauthenticated attackers to access protected backend resources by...
A critical authentication bypass vulnerability, CVE-2026-41940, has been actively exploited in the wild against cPanel & WHM...
Anthropic has officially opened Claude Security to public beta for Claude Enterprise customers, delivering AI-native vulnerability detection...
Microsoft’s April 2026 cumulative update for Windows 11 has triggered a critical failure in third-party backup solutions,...
A critical OS command injection vulnerability (CVE-2026-6644) has been disclosed in the PPTP VPN Client of ASUSTOR...
A high-severity Cross-Site Scripting (XSS) vulnerability, tracked as CVE-2026-32635, has been disclosed in the Angular framework’s runtime...
An uncovered coordinated software supply chain campaign tied to the GitHub account BufferZoneCorp and the RubyGems profile knot-theory, targeting developers,...
A malicious artifact has been identified in the widely used intercom/intercom-php Packagist package (version 5.0.2), confirming that the ongoing...