A critical Adobe flaw is being exploited in targeted attacks against Windows users.

Researchers said they now believe the malware has infected twice the number of router brands than previously stated and that the malware packs a much deadlier punch.

An exploit allows attackers to remotely overwrite archive files with their own content, and from there pivot to achieving remote command execution on the machine.

An analysis of 10,000 mobile apps has found that a significant portion of them are open to web API hijacking – thanks to inconsistencies between app and server logic in web APIs.

More than 115,000 sites are still vulnerable to a highly critical Drupal bug – even though a patch was released three months ago.

Remote code execution vulnerabilities dominate this month’s critical Android patches.

Facebook is again in hot water after an article alleged it struck deals with device-makers to access users’ data.

A Microsoft Windows vulnerability enables remote attackers to execute arbitrary code – and there’s no patch yet.

An attacker can pick up the profile picture, username and the “likes” of unsuspecting visitors who find themselves landing on a malicious website.

Huawei stamps out four high-severity bugs impacting 20 server models ranging from its XH, RH and CH lines.