Secure Bulletin Navigating the cyber sea with knowledge
Home > Categoria > Vulnerability
Latest news

GitLab Releases Critical Security Patch for Multiple High-Severity Vulnerabilities

11 December 2025  |  dark6  |  Vulnerability

Security researchers have uncovered vulnerabilities in GitLab’s Community Edition and Enterprise Edition platforms, prompting the company to release critical security patches. On December 10th, 2025, Gitlab released update...

>> read more

A Critical Patch for Vulnerable Next.js: New Scanner Unveils Hidden Attacks

4 December 2025  |  dark6  |  Vulnerability

With the rise of Serverless functions, static site generators like Next.js have become ubiquitous in web development, streamlining functionality and boosting speed. However, while these frameworks offer undeniable...

>> read more

A Silent Vulnerability Exposed: How Hackers Used Hidden Commands to Steal Sensitive Data

3 December 2025  |  dark6  |  Vulnerability

Microsoft’s seemingly “unremarkable” November 2025 Patch Tuesday update actually contained a major security fix. But even the most meticulous patching process can sometimes be outmaneuvered by cunning threat...

>> read more

Chrome 143: A Patch Day For Deep Dive Cybersecurity Professionals

3 December 2025  |  dark6  |  Vulnerability

Google has just released Chrome 143, ushering in a new era of browser security with 13 addressed vulnerabilities. This release is no mere formality – it’s a critical...

>> read more

Android’s December Patch: Zero-Day Vulnerabilities and Their Impact

2 December 2025  |  dark6  |  Vulnerability

The latest security bulletin from Google has brought forth a grim reality for Android users: multiple zero-day vulnerabilities are actively exploited by threat actors, demanding immediate attention. This...

>> read more

A Critical Design Flaws in Microsoft Azure API Management Threatens Organizations

1 December 2025  |  dark6  |  Vulnerability

Microsoft’s Azure API Management (APIM) Developer Portal, a platform commonly used for managing and securing APIs, is vulnerable to a significant security flaw that enables attackers to bypass...

>> read more

HashJack: weaponizing trust in AI browser assistants

26 November 2025  |  dark6  |  AI

A vulnerability in the way AI browser assistants handle URL fragments opens doors for malicious attacks. For years, we’ve seen AI take center stage across various industries, revolutionizing...

>> read more

A Critical Security Flaws in HashiCorp’s Provider

25 November 2025  |  dark6  |  Vulnerability

HashiCorp’s Vault Terraform provider, a cornerstone of secure secrets management for organizations worldwide, has been found with a critical security flaw. This vulnerability, tracked as CVE-2025-13357, affects users...

>> read more