Critical Flaws Exposed in zkLogin: Zero-Knowledge Proofs Can’t Fix Broken Authentication
Brave Software researchers have disclosed critical vulnerabilities in zkLogin, a widely-deployed blockchain authentication system used across…
Category
Vulnerability
Credential-Stealing Flaw in Ivanti EPM Lets Hackers Waltz Past Authentication
Ivanti just patched a critical authentication bypass in its Endpoint Manager that hands attackers stored credentials…
Critical RCE Flaw in Popular Manga Translation Tool Exposes Thousands to Takeover
A critical security vulnerability in manga-image-translator, a widely used open-source OCR tool with over 9,300 GitHub…
New Notepad Flaw That Lets Hackers Execute Code via Markdown Files
Microsoft patched a serious security hole in Windows Notepad this week that could allow attackers to…
AI Discovers Critical Zero-Click Flaw Threatening 8,500 Enterprise Remote Access Systems
Thousands of organisations running BeyondTrust’s remote access tools face immediate risk after an AI security system…
NGINX Servers Exposed: Response Injection Flaw Puts Millions of Web Applications at Risk
A newly disclosed vulnerability in NGINX web servers could allow attackers positioned between servers and upstream…
AI Hacks AI: Security Tool Finds One-Click RCE in OpenClaw Assistant
In a watershed moment for AI security, an autonomous hacking agent has successfully exploited another AI…
Critical Unauthenticated RCE Flaw Exposes SolarWinds Web Help Desk to Instant Takeover
Security researchers at Horizon3.ai have uncovered a chain of critical vulnerabilities in SolarWinds Web Help Desk…
WinRAR Flaw Becomes Hacker Gold Mine: State Spies and Cybercriminals Still Exploiting Six-Month-Old Bug
Six months after a critical WinRAR vulnerability was patched, hackers from Russia, China, and cybercrime groups…