A critical CVSS 9.2 flaw in AdonisJS bodyparser lets attackers write arbitrary files via path traversal when uploads are ...
December 2025, the RondoDox botnet operators have been targeting Next.js servers impacted by the React2Shell vulnerability.
Researchers uncovered 27 malicious npm packages used over five months to host phishing pages that steal credentials from ...
A new ClickFix social engineering campaign is targeting the hospitality sector in Europe, using fake Windows Blue Screen of ...
MiniMax M2 was released in late October this year. The company stated that M2.1 demonstrated significant improvements in ...
In early December 2025, the React core team disclosed two new vulnerabilities affecting React Server Components (RSC). These issues – Denial-of-Service and Source Code Exposure were found by security ...
Infosecurity has selected five of the most significant vulnerability exploitation campaigns of 2025 that led to major ...
Executive Overview Over the past week, global threat activity has highlighted a critical reality: modern cyber attacks are faster, more coordinated, and increasingly industrialized. From mass ...
A newly uncovered Chinese threat group known as DarkSpectre has been linked to one of the most widespread browser extension ...
A new wave of the GlassWorm malware is now targeting macOS developers by hiding malicious code inside fake Visual Studio Code ...