Flaw in Base44 allowed unauthorized access to private apps, bypassing authentication systems
Posted by Tim Willis, Google Project Zero
In 2021, we updated our vulnerability disclosure policy to the current "90+30" model. Our goals were to drive faster yet thorough patch development, and improve patch adoption. While we’ve seen progress, a significant challenge remains: the time it takes for...
Backdoor malware Auto-Color targets Linux systems, exploiting SAP NetWeaver flaw CVE-2025-31324
Hackers are actively exploiting two critical flaws in Cisco Identity Services Engine, said the US Cybersecurity and Infrastructure Security Agency
Not all browser add-ons are handy helpers – some may contain far more than you have bargained for
The federal government has applied for forfeiture of the funds, which were seized by FBI Dallas in April 2025
A Scottish charity has been fined ÂŁ18,000 for systematic data protection failings
Posted by Tim Willis, Google Project Zero In 2021, we updated our vulnerability disclosure policy to the current "90+30" model. Our goals were to drive faster yet thorough patch development, and improve patch adoption. While we’ve seen progress, a significant challenge remains: the time it takes for...
Two pro-Ukraine hacktivists have claimed responsibility for a destructive attack on Aeroflot
Le département de police de North St. Paul a été visé par une cyberattaque, ce qui a conduit à une réunion d'urgence du conseil municipal pour répondre à l'attaque. Les détails de la cyberattaque n'ont pas été divulgués. La ville a approuvé un contrat avec un cabinet d'avocats pour enquêter et exami...
L'attaque n'a pas été revendiquée, mais l'enseigne Qilin divulgue des données présentées comme issues des systèmes de Connex Credit Union.
This year I spent a lot of time reviewing, exploiting and working with vendors to fix vulnerabilities in agentic AI systems.
As a result, I’m excited to announce the Month of AI Bugs 2025!
Goal Of The Initiative The main purpose of the Month of AI Bugs is to raise awareness about novel security vuln...
Avosina Healthcare Solutions experienced a data breach on July 29, 2025, where an unknown third party accessed and compromised certain data within their systems. The impacted information may have included names, addresses, medical information, and health insurance information. A cyberattack was clai...
10,000 WordPress sites vulnerable to takeover due to critical flaws in HT Contact Form Widget plugin
Scattered Spider has targeted VMware vSphere environments, exploiting retail, airline and insurance sectors
Today we’re announcing the beta release of mcp-context-protector, a security wrapper for LLM apps using the Model Context Protocol (MCP). It defends against the line jumping attacks documented earlier in this blog series, such as prompt injection via tool descriptions and ANSI terminal escape codes.
Insurance firm Allianz Life said that a threat actor accessed personally identifiable information of the majority of its 1.4 million US customers
Despite claims by a hacker, French defense company Naval Group has detected no intrusions into its IT environments at the time of writing
Adobe ColdFusion 2023.6 - Remote File Read
Arizonan woman sentenced to 102 months for operating laptop farm for North Korean IT workers