PortSwigger has leveled up Burp Suite's scanning arsenal with the latest Active Scan++ extension, version 2.0.9, released on December 16, 2025.
This free BApp,...
Unit 42 researchers at Palo Alto Networks exposed serious flaws in the Model Context Protocol (MCP) sampling feature used in AI coding copilots.
Malicious...
Polish police have arrested three Ukrainian men traveling through Europe and seized a cache of advanced hacking equipment that could target critical IT systems....
Google has launched its most significant Chrome update ever, embedding Gemini AI across the browser to boost productivity, simplify browsing, and strengthen security.
Announced...
Attackers exploit this vulnerability through the router's web interface components, specifically "cgibin" and "hnap_main," by submitting input that exceeds allocated buffer sizes, leading to...
PortSwigger has leveled up Burp Suite's scanning arsenal with the latest Active Scan++ extension, version 2.0.9, released on December 16, 2025.
This free BApp,...
Unit 42 researchers at Palo Alto Networks exposed serious flaws in the Model Context Protocol (MCP) sampling feature used in AI coding copilots.
Malicious...
Polish police have arrested three Ukrainian men traveling through Europe and seized a cache of advanced hacking equipment that could target critical IT systems....
Google has launched its most significant Chrome update ever, embedding Gemini AI across the browser to boost productivity, simplify browsing, and strengthen security.
Announced...
Attackers exploit this vulnerability through the router's web interface components, specifically "cgibin" and "hnap_main," by submitting input that exceeds allocated buffer sizes, leading to...
Security researchers have uncovered a severe flaw in Apache Tika, a popular open-source toolkit for content analysis and extraction. CVE-2025-66516 has a perfect CVSS...
Attackers can keep access to AWS accounts even after admins delete compromised keys.
New research from OffensAI shows how AWS Identity and Access Management...
Cybersecurity researchers at Barracuda uncovered GhostFrame, a slick phishing-as-a-service (PhaaS) kit, back in September 2025.
By early December, it powered over a million attacks...