Cisco has released security updates to patch a ClamAV denial-of-service (DoS) vulnerability, which has proof-of-concept (PoC) exploit code. Tracked as CVE-2025-20128, the vulnerability is caused by a ...

Mozilla has issued an emergency update to its Firefox browser to address a critical heap buffer overflow vulnerability in the libvpx video codec library, urging users and organisations to apply the ...

Google released a Chrome security update fixing two high-severity flaws that could enable code execution or crashes via malicious websites.

The federal directive forbids vendors from shipping software with such flaws, and flags recent Microsoft, and Ivanti zero-days as examples. FBI and CISA have issued a joint advisory to warn software ...