Graphite Spyware Uses iOS Zero-Click Vulnerability to Target Journalists
Cybersecurity researchers have confirmed that two prominent journalists were successfully targeted with Paragon's Graphite mercenary spyware through a sophisticated zero-click attack exploiting an Apple...
Critical Weakness In OpenPGP.js Enables Forged Signature Authentication
A critical security vulnerability has been found in OpenPGP.js, a widely used JavaScript cryptography library that enables secure encrypted communications and digital signature verification...
HashiCorp Nomad Vulnerability Allows Attackers to Bypass ACL Policies and Gain Elevated Access
A critical security vulnerability has been discovered in HashiCorp Nomad's Access Control List (ACL) system that allows attackers to escalate privileges through a flawed...
Windows Disk Cleanup Tool Vulnerability: PoC Exploit Now Public
Security researchers have released a proof-of-concept exploit for CVE-2025-21420, a critical elevation of privilege vulnerability affecting Windows Disk Cleanup tool (cleanmgr.exe).
The vulnerability leverages...
OneLogin AD Connector Flaws Expose Authentication Credentials
A wave of security concerns has emerged around OneLogin’s Active Directory (AD) Connector after a security researcher revealed a series of technical vulnerabilities that...
