Attackers target unpatched ShowDoc servers via CVE-2025-0520
Attackers target unpatched ShowDoc servers via CVE-2025-0520 Pierluigi Paganini April 14, 2026 A critical RCE flaw, tracked as CVE-2025-0520, in...
Security
U.S. CISA adds Adobe, Fortinet, Microsoft Exchange Server, and Microsoft Windows flaws to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Adobe, Fortinet, Microsoft Exchange Server, and Microsoft Windows flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini...
New PHP Composer Flaws Enable Arbitrary Command Execution — Patches Released
Ravie LakshmananApr 14, 2026Vulnerability / DevSecOps Two high-severity security vulnerabilities have been disclosed in Composer, a package manager for PHP, that, if successfully...
Google Adds Rust-Based DNS Parser into Pixel 10 Modem to Enhance Security
Ravie LakshmananApr 14, 2026Mobile Security / Network Security Google has announced the integration of a Rust-based Domain Name System (DNS)...
Adobe Issues Emergency Patch for Critical PDF Flaw Exploited For Months
Image: Generated via Google’s Nano Banana Adobe rushed an emergency patch for a critical flaw under active attack. Discovered by...
Google $135M Settlement: Millions of Android Users May Qualify for Payout
Image: Denny Müller/Unsplash A long-running dispute over background data use on Android phones is heading toward a payout, with millions...
Taming Network Policy Sprawl with AI
Zero-trust and micro-segmentation have become the default direction for enterprise network security, and for good reason. But the shift has...
Analysis of 216M Security Findings Shows a 4x Increase In Critical Risk (2026 Report)
The Hacker NewsApr 14, 2026Application Security / DevSecOps OX Security recently analyzed 216 million security findings across 250 organizations over...
ShowDoc RCE Flaw CVE-2025-0520 Actively Exploited on Unpatched Servers
Ravie LakshmananApr 14, 2026Vulnerability / Network Security A critical security vulnerability impacting ShowDoc, a document management and collaboration service popular in...
CISA Adds 6 Known Exploited Flaws in Fortinet, Microsoft, and Adobe Software
Ravie LakshmananApr 14, 2026Vulnerability / Network Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added half a dozen...
Post-Quantum Decentralized Policy Enforcement for Large Language Models
Why traditional security fail for modern ai models Ever wonder why your fancy firewall doesn't seem to stop ai leaks?...
GrafanaGhost: The AI That Leaked Everything Without Being Hacked
Image: Prostock-studio/Adobe No credentials were stolen. No alerts were triggered. And yet, the data slipped out anyway. On April 7,...
Why Network Monitoring Alone Misses Application Attacks
TL;DR Network security monitoring excels at traffic analysis and perimeter defense, yet research shows WAF alerts generate overwhelming noise with...
Booking.com Hack Exposes Customer Data, Sparks Travel Scam Fears
Image: Jas Rolyn/Unsplash That upcoming vacation? Hackers may already know all about it. Booking.com, the global giant that handles everything...
Google Rolls Out End-to-End Encryption to Eligible Gmail Users on Mobile
Image: Rubaitul Azad/Unsplash Gmail is finally bringing end-to-end encryption to mobile devices, allowing eligible Google Workspace users to send and...
