ShadowLeak allows attackers to exfiltrate sensitive data without user interaction, highlighting AI security risks.

CISA has revealed that attackers breached the network of an unnamed U.S. federal civilian executive branch (FCEB) agency last ...

AWS security vulnerability exploited by threat actors with hackers stealing credentials via AWS IMDS through EC2 instances, ...

The vulnerability in question is CVE-2025-51591 (CVSS score: 6.5), which refers to a case of Server-Side Request Forgery ...

Researchers at web security company Radware recently discovered what they described as a service-side data theft attack ...

Hackers are exploiting a server-side request forgery (SSRF) vulnerability in Ivanti Connect Secure, Policy Secure, and ZTA gateways to deploy the new DSLog backdoor on vulnerable devices. The ...

Tenable Research recently discovered that the original patch for a critical vulnerability affecting BentoML could be bypassed ...

A public exploit appeared just two days after Microsoft Corp. acknowledged a critical vulnerability in its server software, a change one security company said “greatly increases” the chances of a ...

Microsoft recently patched three vulnerabilities in its Azure API Management service, two of which enabled server-side request forgery (SSRF) attacks that could have allowed hackers to access internal ...

In an in-depth report detailing the incident, the US Cybersecurity and Infrastructure Security Agency (CISA) outlined how the ...