Google uses AI to enhance accessibility! Learn about improved TalkBack image descriptions, expressive captions, and other new Android & Chrome features.

Over 10,000 WordPress sites at risk from Eventin plugin flaw CVE-2025-47539. Attackers can gain admin access via unauthenticated API exploit.

Malware found in Procolored printer software includes backdoor XRed and new clipbanker virus SnipVex. Users urged to reformat infected systems.

PoC for CVE-2023-41992 reveals iOS kernel flaw enabling local privilege escalation. Apple patched it, but risks persist for outdated devices.

CISA adds critical DrayTek router, Chrome, and SAP NetWeaver flaws to its KEV list after in-the-wild exploitation. Federal agencies face a June 5th patch deadline.

CVE-2025-4641: XXE flaw in popular WebDriverManager library (CVSS 9.3) exposes test systems to file leaks and SSRF. Patch to 6.0.2 now.

Zscaler reveals TransferLoader: a stealthy malware using IPFS and obfuscation to drop ransomware and backdoors. A new threat in the wild since 2025.

CVE-2025-46801 in Pgpool-II scores 9.8 CVSS—flaw lets attackers log in as any user. Patch now to prevent database tampering and access.

Jenkins plugins hit by CVE-2025-47884 (CVSS 9.1) and more—flaws enable impersonation, XSS, and authentication bypass. Patch now to secure pipelines.

DTEX reveals how North Korea's hidden IT workforce and cyber syndicate drive global espionage, crypto theft, and AI-powered attacks.

Urgent security alert! I-O DATA NAS devices vulnerable. A critical 9.8 CVSS flaw (CVE-2025-32002) enables remote command execution. Update firmware now!

Russia-linked APT28 (Sednit/Fancy Bear) targets vulnerable webmail with XSS in Operation RoundPress, stealing data from global entities.

SonicWall fixes CVE-2025-40595, a high-severity SSRF flaw in SMA1000 appliances. Patch now to block remote encoded URL exploitation.

JPCERT reports critical flaws in a-blog cms, including CVE-2025-36560 (CVSS 9.2). Attackers could hijack sessions and access sensitive data.

Keeping your ears to the ground and eyes wide open for the latest vulnerability news at watchTowr is a given. Despite rummaging through enterprise code looking for 0days on a daily basis, our interest was piqued this week when news of fresh vulnerabilities…

A common use case for LLMs is rapid software development. One of the first ways I used AI in my penetration testing methodology was for payload generation.

✨Free Article Link

$500 for discovering a timing flaw in Hacker101’s invite system that let users join the same team multiple times

Want to find bugs in 5-minutes? Let me help you real quick.

Unleashing logic-flipping payloads in the neon-lit alleys of NoSQL One Injection at a Time.

Claiming Unclaimed Restaurants on Zomato via OTP Manipulation