Hackers are actively exploiting a critical vulnerability in the official Docker image for the Gitea self-hosted Git service ...

Threat actors are exploiting a vulnerability in Gitea’s reverse-proxy authentication mechanism to access internet-accessible instances by supplying only a valid username.

ShareFile Storage Zone Controller vulnerability prompts Progress Software to order an emergency shutdown of all on-premises ...

A critical flaw in Gitea's official Docker image let anyone impersonate an admin with one forged header. Sysdig spotted the ...

Many organizations assume that deploying CAPTCHA is enough to stop automated attacks.Yet security teams continue to encounter a frustrating reality: bots are st ...

a laptop screen with a webpage of the IT Army of Ukraine group of volunteer hackers. The IT Army of Ukraine first set up in the wake of Russia's devastating attack, and has since hugely grown in ...

Discover how API Gateway security debt can turn your critical control point into a liability. Learn from expert Ankur ...

CVE-2026-20896, a bypass authentication flaw in a popular self-hosted DevOps platform, was patched on June 21, but attacks ...

BeyondTrust has urged customers to patch two critical Authentication Bypass vulnerabilities, tracked as CVE-2026-40138 and CVE-2026-40139, affecting its Remote Support (RS) and Privileged Remote ...

BeyondTrust fixed four RS and PRA flaws, including two pre-auth bugs that could bypass appliance access controls under ...

CVE-2026-11405 affects five Tenda firmware builds and can bypass password checks through an undocumented admin login path in ...

A hidden authentication backdoor has been found in multiple Tenda router firmware versions, potentially allowing an attacker ...