China-based hackers exploited SAP flaw CVE-2025-31324 since April 29, impacting global industries via web shells.

The so-called “AirBorne” flaws enable zero-click attacks and device takeover on local networks.

A proof-of-concept exploit tool has been publicly released for a maximum severity Apache Parquet vulnerability, tracked as ...

The vulnerabilities, in a nutshell, could enable zero- or one-click remote code execution (RCE), access control list (ACL) ...

Zero-click exploits don’t require any interaction from the target, as opposed to a phishing attack, for example, making these bugs more valuable. A zero-click, RCE zero-day is essentially the ...

Public exploits are now available for a critical ... are targeted by nation state APTs such as Volt and Salt Typhoon for example." Girnus refers to the Chinese state-sponsored hacking groups ...

The AirBorne security vulnerabilities in Apple's AirPlay SDK and devices could let a hacker take total control.

Identified as CVE-2023-34051 in a recent advisory, the high-severity remote code execution (RCE) flaw (CVSS score ... along with a proof-of-concept (PoC) exploit and a list of indicators of ...