ScanForge Security Digest 2629-02

An anonymous HTTP request can run code on a WordPress site. The bug is in core, so a bare install with zero plugins is e

Lots of articles about this. As usual, you can also use this squid post to talk about the security stories in the news t

Abbott Laboratories is investigating two separate cybersecurity incidents after confirming unauthorized access to intern

Eleven bytes will make an unpatched OpenSSL server set aside up to 131 KB of memory for a message that never arrives. On

When chained together, the two vulnerabilities allow threat actors to gain root-level capabilities on SonicWall's mobile

Cybersecurity researchers have discovered a cluster of seven malicious npm packages targeting the Vite frontend tooling

A vulnerability dubbed HollowByte allows unauthenticated attackers to trigger a denial-of-service (DoS) condition on Ope

A Go botnet called NadMesh turned up in early July hunting exposed AI services, and the operator's own dashboard claims