For this Cybersecurity Awareness Month, we thought it important to draw attention to some of the most common and dangerous API vulnerabilities.  This week, we’re starting with Broken Object Level ...

CVE-2025-59363 "allowed attackers with valid API credentials to enumerate and retrieve client secrets for all OIDC ...

Wiz announced Zeroday.Cloud, a new hacking competition where participants can earn significant rewards for cloud software ...

Unknown threat actors are abusing Milesight industrial cellular routers to send SMS messages as part of a smishing campaign ...

Stablecoin payment firm Infini lost $50 million in an exploit suspected to have been conducted by a developer who retained administrative privileges after project delivery. The perpetrator is believed ...

Alex Protocol, a Bitcoin decentralized finance (DeFi) platform on the Stacks blockchain, suffered an exploit on June 6, resulting in $8.3 million in digital asset losses. In an X announcement, Alex ...

Broadcom has patched the CVE-2025-41244 vulnerability. A good thing indeed as exploits had been occurring since October of ...

The Zero Day Initiative is offering a $1 million reward to security researchers who will demonstrate a zero-click WhatsApp exploit at its upcoming Pwn2Own Ireland 2025 hacking contest. The record ...

A security researcher has released a partial proof of concept exploit for a vulnerability in the FortiWeb web application firewall that allows a remote attacker to bypass authentication. The flaw was ...

Endpoint security tools protect users against compromises. However, EDR-Freeze disables them via error messages within ...