Advisory

Severity CRITICAL  Threat Category Vulnerability – Authentication Bypass/ Account Takeover Affected Platforms Keycloak 26.4.x (before 26.4.15), 26.6.x (before 26.6.6), 26.7.x […]

Severity CRITICAL Threat Category Vulnerability (SQL Injection, Potential Remote Code Execution) Affected Platforms GeoServer Application versions < 2.27.6, < 2.28.5,

Severity CRITICAL Threat Category Vulnerability (Remote Unauthenticated Code Execution) Affected Platforms Veeam ONE (versions 13.0.2.6723 and earlier Version 13 builds)

Critical “wp2shell” REST API Route Confusion and SQL Injection Vulnerabilities in WordPress Core Severity CRITICAL (CVSS 10.0) Threat Category Vulnerability

Active Global Malware Campaign Abusing Compromised WhatsApp Accounts to Distribute Malicious VBScript FilesAdd Your Heading Text Here Severity HIGH Threat

Critical “mod_http2” Denial of Service and Remote Code Execution Vulnerability in Apache HTTP Server Severity CRITICAL (CVSS ~9.8–10.0, depending on

Fake Telegram Channel Alert The Bhutan Computer Incident Response Team (BtCIRT), Cybersecurity Division, GovTech Agency, earnestly urges the general public

A recent supply chain attack involving the widely used axios library has raised significant security concerns across the JavaScript ecosystem.

PreparationTo increase your chances of proving ownership, use a device (phone, laptop, or browser) that you have previously used to

BtCIRT has been reported of multiple incidents involving the compromise of Gmail accounts that are linked to bank accounts of