Topic
Every article tagged Top CVEs 2025, newest first.
Your Cybersecurity Wrapped 2025 is here. From the $1.5B crypto heist to the rise of AI malware and the 'React2Shell' crisis, we recap the year's wildest hacks, trends, and the Top 10 CVEs.
Keep reading
Node.js CVE-2026-111497 exposes Brotli decoding to potential RCE. Check affected versions, fetch() exposure, WAF limits, and the October 2026 patch checklist.
PHP2Shell (CVE-2026-109618 & CVE-2026-109619) exposes 70% of the web to unauthenticated PHP RCE and memory leaks. Check fixed versions, IOCs, and mitigations.
Google Cloud VPC Service Controls now supports folder-level perimeters, folder and organization rules, PSC endpoints, service patterns, and guided violation remediation. Here are the technical details and YAML configs.