Attackers Exploit Forged Flask Sessions to Achieve RCE
A critical security vulnerability in Google’s shared DevSite platform could have allowed attackers to execute remote code on multiple Google developer websites without authentication. The flaw was discovered by security [...]
Critical AnyDesk Linux Flaw Allows Root Code Execution
A working proof of concept has been released for a serious vulnerability in AnyDesk for Linux that could allow remote attackers to execute commands with root privileges without authentication or [...]
One-Click Telegram Desktop Exploit Demonstrated in New PoC
A newly published proof of concept (PoC) has demonstrated a security flaw in Telegram Desktop that could allow attackers to steal local files and potentially take over a user's account. [...]
New AI Red Team Guide: 222 Security Tests Unveiled
A new free security checklist provides 222 tests across 20 attack categories to help organizations assess the security of agentic AI systems. The checklist goes beyond traditional prompt-injection testing. It [...]
SonicWall SMA1000 Update Fixes Critical Security Issues
SonicWall has released security updates for four vulnerabilities affecting its Secure Mobile Access (SMA) 1000 Series appliances. One of the flaws is considered critical and has received the maximum CVSS [...]