Incident analysis, vulnerabilities, data leaks and practical lessons from security events.
Security Warning: Recent ZBTKEEP 0 vulnerabilities (CVE-2026-13001, CVE-2026-15013, CVE-2026-12492) In recent weeks, several critical vulnerabilities have been published in...
Discover how recent vulnerabilities inWordPressplugins can jeopardize your site’s security and find out how to prevent attacks Introduction In recent days, there have been...
Roundcube Webmail has released security updates 1.6.17 and 1.7.2 to fix critical vulnerabilities CVE-2026-54432 and CVE-2026-54433 Roundcube Webmail fixes two...
Discovering three major vulnerabilities inWordPressplugins: Invoice Generator, AdRotate Banner Manager and Email Address Encoder. Understand the impact and take action to...
A recently discovered vulnerability in the Vitepos plugin forWordPressmay allow for privileges to escalate. Learn how to protect your site. A recent vulnerability,...
Learn what happens during a cyberattack and how you can protect your business Introduction: Cyberattack on a small business Cyberattacks are an increasingly...
You need to urgently update theWordPressplugins to prevent account takeover attacks and escalating privileges Critical vulnerabilities in ZBTKEEP plugins1
Critical Vulnerabilities inWordPress: Arbitrary File Upload, Code Injection and Creating Administrator Accounts. Protect Your Sites! Recently, three vulnerabilities have been published...
TheWordPressecosystem remains one of the most targeted platforms by attackers, mainly due to the widespread use of third-party-developed plugins.
WordPressdominates the landscape of content management systems (CMS), feeding a significant portion of the Internet. This ubiquitous popularity, although it is a proof of...
The accidental leak of details in the Autumn Statement, recently produced at the Office for Budget Responsibility (OBR) in the UK, is a perfect example of how the infrastructure...
A major cyber threat has recently been discovered: more than 10,000 unique IP addresses have been identified as being infected with a completely new, previously unknown variant of the virus.
On April 28, 2026, cPanel quietly released an emergency patch. The next day, watchTowr Labs released the exploit. Between the two moments, over two million hosting servers...
Affected Platform: Instagram Exposure to private Instagram posts via polaris_timeline_connection Complete technical analysis of an officially denied server-side vulnerability...
Update your Google Chrome browser immediately and all Chromium-based browsersZebraByteinform users about the emergence of critical vulnerabilities in Google Chrome...
WordPressdominates the landscape of content management systems (CMS), feeding a significant portion of the Internet. This ubiquitous popularity, although it is a proof of...
In July–August 2025, ESET researchers discovered a serious zero-day vulnerability in WinRAR, identified as CVE-2025-8088.
The digital landscape of 2025 is marked by a sharp increase in cyber attacks targeting websites.
In June 2025, one of the largest cybersecurity incidents in history occurred. Researchers found that 16 billion user names and...
The Common Vulnerabilities and Exposures (CVE®) program is one of the fundamental pillars of global cybersecurity.
Can’t find the framework you are looking for?
Talk to us — we may be able to include it in the program.
Don’t see the framework you are looking for?
Reach out – it may already be supported in the program.
