Please turn on your JavaScript for this page to function normally.
ProjectDiscovery
With open-weight AI, more of the security burden falls on enterprises
Organizations that run open-weight AI models on their own infrastructure may have to supply safety and security controls that an AI provider would otherwise handle for them, …
Critical Next.js auth bypass vulnerability opens web apps to compromise (CVE-2025-29927)
A critical vulnerability (CVE-2025-29927) in the open source Next.js framework can be exploited by attackers to bypass authorization checks and gain unauthorized access to web …
Exploit code for critical GitLab auth bypass flaw released (CVE-2024-45409)
If you run a self-managed GitLab installation with configured SAML-based authentication and you haven’t upgraded it since mid-September, do it now, because security …
Critical Zimbra RCE vulnerability under mass exploitation (CVE-2024-45519)
Attackers are actively exploiting CVE-2024-45519, a critical Zimbra vulnerability that allows them to execute arbitrary commands on vulnerable installations. …
Featured news
Resources
Don't miss
- Bellini Capital CISO on AI security governance and the limits of patching faster
- AbuseBox: Open-source monitor for blacklists, DNS, SSL and email records
- Cyberattack disrupts University of New Mexico hospitals, extortion group claims attack
- DreamHost incident triggers password resets, locks customers out of email and FTP accounts
- Several AI security market categories are headed for bigger platforms