ESET Research has discovered a significant cybersecurity threat as the Winter Vivern group exploited a zero-day cross-site scripting (XSS) vulnerability in the Roundcube Webmail server. The new ...

Researchers have published a proof-of-concept (PoC) exploit script demonstrating a chained remote code execution (RCE) vulnerability on Progress Telerik Report Servers.

Hackers are exploiting a server-side request forgery (SSRF) vulnerability in Ivanti Connect Secure, Policy Secure, and ZTA gateways to deploy the new DSLog backdoor on vulnerable devices.

Cybercriminals are increasingly exploiting mobile browsers Compromised ... C/side also advocates for real-time visibility into what scripts are executing in the browser, rather than relying solely on ...

"We can now confirm that EA has deployed a server-side fix to prevent some of the exploits from being used to interfere with official game servers," according to a post from Kyber, a community ...