July 17, 2025; CVSS 10.0 Entra ID bug via legacy Graph enabled cross-tenant impersonation risking tenant compromise.

Two billion downloads per week. That’s the download totals for the NPM packages compromised in a supply-chain attack this ...

An illustration of a magnifying glass. An illustration of a magnifying glass.

A suspected Chinese cybercrime group is deploying custom malware to compromise Windows servers in Brazil, Thailand, Portugal ...

Dozens of Windows servers have been hijacked by a Chinese hacking group to boost Google’s rankings for shady gambling websites, experts have found.

Abstract: As web applications become increasingly popular for offering data and services among businesses and organizations they also become more susceptible to security risks. Many organizations rely ...

The Web Directory Free plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 1.6.9 due to insufficient escaping on a user supplied parameter and lack of sufficient ...

Mitel MiCollab NuPoint Messenger (NPM) through 9.8.0.33 contains a sql_injection caused by insufficient sanitization of user input, letting unauthenticated attackers access sensitive data and execute ...

Abstract: The thriving need for data in the cyber world has posed increased security concerns which has made traditional intrusion detection systems (IDS) ineffective especially to current or emergent ...