Computer Security News

Google has officially released Chrome 132 to the stable channel, bringing critical security updates and feature enhancements to users on Windows, macOS, and Linux. The update, version 132.0.6834.83/84, will be rolled out gradually over the coming days and weeks....

Microsoft has disclosed a significant security vulnerability in its Windows Line Printer Daemon (LPD) service, tracked as CVE-2025-21224. This flaw could allow attackers to execute remote code on affected systems, posing a serious risk to organizations relying on the...

Microsoft has disclosed a significant vulnerability in its Windows Remote Desktop Gateway (RD Gateway) that could allow attackers to exploit a race condition, resulting in a denial-of-service (DoS) attack. The flaw, identified as CVE-2025-21225, was addressed in the company's January...

Ako, commonly referred to as MedusaReborn, is a C++-based ransomware strain that has been active since January 2020. It functions under the Ransomware-as-a-Service (RaaS) business model, enabling several adversaries to utilize it in exchange for a portion of their earnings...

Microsoft has alerted users to an issue with its Multi-Factor Authentication (MFA) system, which has disrupted access to certain Microsoft 365 applications. The problem, identified earlier today, left some users unable to log in due to MFA failures. Microsoft has...

Researchers have conducted a detailed study on the capabilities of ZAP (Zed Attack Proxy), an open-source tool widely used for identifying vulnerabilities in web applications. The study, led by experts from National Tsing Hua University and the Industrial Technology...

A critical security vulnerability, CVE-2025-0282, has been identified and exploited in the wild, affecting Ivanti Connect Secure, Policy Secure, and Neurons for ZTA gateways. This stack-based buffer overflow vulnerability, rated with a CVSS score of 9.0, allows unauthenticated attackers...

Welcome to this week’s Cyber Security Newsletter, where we explore the latest advancements and important updates in the field of cybersecurity. Your engagement in this rapidly changing digital landscape is crucial, and we strive to provide you with the...

IBM disclosed a significant vulnerability in its watsonx.ai platform, potentially exposing users to cross-site scripting (XSS) attacks. The vulnerability, identified as CVE-2024-49785, affects both IBM watsonx.ai on Cloud Pak for Data and standalone IBM watsonx.ai installations. The security flaw allows...

Security researchers have successfully hacked Apple's proprietary ACE3 USB-C controller. This chip, introduced with the iPhone 15 and iPhone 15 Pro, represents a significant leap in USB-C technology, handling power delivery and acting as a sophisticated microcontroller with access...