Critical CVE-2026-2329 flaw in Grandstream GXP1600 VoIP phones enables unauthenticated RCE, call interception, and credential theft.

Fortinet fixes critical FortiClientEMS SQL injection flaw (CVSS 9.1) enabling code execution; separate SSO bug actively exploited.

A critical zero-click flaw in Claude Desktop Extensions allows remote code execution via calendar invites, risking over ...

Enterprises relying on Gladinet’s file-sharing services are faced with another round of zero-day patching, this time to block attackers from abusing cryptographic keys directly baked into its ...

Google has released an emergency update to patch an actively exploited zero-day—the first Chrome zero-day of the year.

Google released a Chrome security update fixing two high-severity flaws that could enable code execution or crashes via malicious websites.