TP-Link has patched 15 vulnerabilities in the zero-touch provisioning (ZTP) mechanism of its Omada network devices that could ...

Tracked as CVE-2026-63077, the critical bug can be exploited without authentication for remote code execution.

NMFTA research shows a 2024 Bendix EC80 truck brake controller safety recall also patched RCE and DoS vulnerabilities.

The Omada platform was found to be vulnerable in different ways, but TP-Link has already issued patches.

JetBrains is warning of a critical authentication bypass vulnerability affecting TeamCity On-Premises that could be exploited ...

Misplaced identity and authorization assumptions could lead to remote code execution, data exposure, and developer-machine ...

A critical zero-day vulnerability in Microsoft SharePoint is being exploited in the wild right now, and more than 1,300 servers remain exposed to the public internet with no patch applied. The flaw, ...

Straiker, The Agentic Security Company, today released the inaugural threat report from its STAR Labs team. To understand the real-world risk AI agents pose to enterprises, researchers ran thousands ...

Tenet Security showed how a publicly exposed error-tracking credential and an MCP integration chain into remote code ...

Data resilience solutions provider Veeam Software released a critical patch for its Veeam Backup & Replication product. The update fixes a deserialization issue that can result in remote code ...

What can you do with a cheap Linux machine with limited flash and only a single free GPIO line? Probably not much, but sometimes, just getting root to prove you can is the main goal of a project. If ...

A flaw in Hugging Face Transformers could allow malicious AI models to execute code, exposing credentials and highlighting AI supply chain risks. Organizations using vulnerable versions of the Hugging ...