This glossary includes the most common terms and expressions TechCrunch uses in our security reporting, and explanations of ...

An Active! Mail zero-day remote code execution vulnerability is actively exploited in attacks on large organizations in Japan ...

Threat actors exploited Craft CMS zero-days CVE-2025-32432 and CVE-2024-58136, compromising 300 of 13,000 vulnerable servers.

The bug is an arbitrary code execution flaw, allowing threat actors to run any code on either Windows, or Linux servers. Apache OFBiz (short for Open For Business) is an open-source enterprise ...

The flaw, tracked as CV-2025-34028, could allow remote attackers to execute arbitrary code without authentication on affected ...

Servers exposed to complete takeover due to CVE-2025-32433, an unauthenticated remote code execution flaw in Erlang/OTP ...

CISA warned federal agencies to secure their SonicWall Secure Mobile Access (SMA) 100 series appliances against attacks ...

The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach ...

Apple has released urgent security updates across its major platforms to address two newly discovered zero-day vulnerabilities that were actively exploited in targeted attacks. The flaws, affecting ...