Over 900 FreePBX systems remain infected after CVE-2025-64328 exploitation, now listed in CISA KEV amid active attacks.

Hackers exploited CVE-2025-64328, a FreePBX command injection vulnerability, to infect hundreds of instances with web shells.

Zyxel fixes a handful of worrying router flaws ...

Developer-first security tool blocks AI manipulation attacks in under 100 milliseconds with a single API call Our goal ...

A command injection flaw in the Windows Notepad App now gives remote attackers a path to execute code over a network, turning ...

The popular D-Link DAP-X1860 WiFi 6 range extender is susceptible to a vulnerability allowing DoS (denial of service) attacks and remote command injection. The product is currently listed as available ...

For a brief window of time in the mid-2010s, a fairly common joke was to send voice commands to Alexa or other assistant devices over video. Late-night hosts and others would purposefully attempt to ...

Threat actors can exploit a security vulnerability in the Rust standard library to target Windows systems in command injection attacks. GitHub rated this vulnerability as critical severity with a ...

Cisco is warning of a critical security vulnerability found in its Unified industrial Wireless Software for Cisco Ultra-Reliable Wireless Backhaul (URWB) access points that could allow an ...

Researchers warn that AI assistants like Copilot and Grok can be manipulated through prompt injections to perform unintended actions.