Unlocked Gates: DoD Contractor’s Lax API Leaves Military Data Vulnerable for Months

A critical “zero-auth” flaw in a military training platform exposed sensitive U.S. service member data and confidential training materials for nearly five months.

How a Simple Coding Blunder in Symantec DLP Opened the Door to Corporate Takeovers

Inside the KACE: How Unpatched Systems Became an Open Door for Credential Thieves

Attackers are exploiting a critical flaw in Quest KACE SMA, bypassing authentication to infiltrate enterprise networks and harvest sensitive credentials.

From Notepad to Nightmare: How a Simple Click Could Compromise Your Windows PC

A newly patched flaw in Windows Notepad’s Markdown feature puts millions at risk, with a public exploit now circulating.

Vulnerabilità critica nei dispositivi Iskra iHUB e iHUB Lite: rischio di acquisizione da remoto