This glossary includes the most common terms and expressions TechCrunch uses in our security reporting, and explanations of ...

An Active! Mail zero-day remote code execution vulnerability is actively exploited in attacks on large organizations in Japan ...

Threat actors exploited Craft CMS zero-days CVE-2025-32432 and CVE-2024-58136, compromising 300 of 13,000 vulnerable servers.

The bug is an arbitrary code execution flaw, allowing threat actors to run any code on either Windows, or Linux servers. Apache OFBiz (short for Open For Business) is an open-source enterprise ...

"A critical security vulnerability has been identified in the Command Center installation, allowing remote attackers to execute arbitrary code without authentication," Commvault said in an advisory ...

The flaw, tracked as CV-2025-34028, could allow remote attackers to execute arbitrary code without authentication on affected ...

Servers exposed to complete takeover due to CVE-2025-32433, an unauthenticated remote code execution flaw in Erlang/OTP ...

CISA warned federal agencies to secure their SonicWall Secure Mobile Access (SMA) 100 series appliances against attacks ...

A threat actor claims to offer a zero-day exploit for an unauthenticated remote code execution vulnerability in Fortinet ...