Critical XXE Bug CVE-2025-66516 (CVSS 10.0) Hits Apache Tika, Requires Urgent Patch
A critical security flaw has been disclosed in Apache Tika that could result in an XML external entity (XXE) injection attack. The vulnerability, tracked as CVE-2025-66516, is rated 10.0 on the CVSS scoring scale, indicating maximum severity. “Critical XXE in Apache Tika tika-core...
Zero-Click Agentic Browser Attack Can Delete Entire Google Drive Using Crafted Emails
A new agentic browser attack targeting Perplexity’s Comet browser that’s capable of turning a seemingly innocuous email into a destructive action that wipes a user’s entire Google Drive contents, findings from Straiker STAR Labs show. The zero-click Google Drive Wiper technique...
Critical React2Shell Flaw Added to CISA KEV After Confirmed Active Exploitation
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday formally added a critical security flaw impacting React Server Components (RSC) to its Known Exploited Vulnerabilities (KEV) catalog following reports of active exploitation in the wild. The vulnerability, CVE-2025-55182...
After Email Hacking, University Targeted By Another Breach
After experiencing an email hacking incident on Oct. 31, the University of Pennsylvania has faced another cyberattack. Continue reading →
5 Cybersecurity Predictions for 2026
Quantum computing, biometrics and more — these are five predictions for the cybersecurity landscape in 2026. Continue reading →
How to Ensure Security Barriers Don't Become Guest Barriers
Balancing security and the guest experience can be difficult. But, if implemented effectively, visitor management systems and processes can benefit the guest experience rather than hinder it. Continue reading →
Hemophilia gene therapies are struggling on the market, even as innovation soars
The business case for hemophilia gene therapy still isn’t adding up due to persistent market barriers. Continue reading →
Vertex CRISPR therapy hits early goal in children with blood disorders
Casgevy, now a "national priority" drug, helped kids with sickle cell and thalassemia, results which may help toward a label expansion and stronger commercial uptake. Continue reading →
RFK Jr.’s hand-picked panel questions childhood vaccine schedule
After weakening an endorsement for the hepatitis B vaccine, ACIP began debating the merits of the protocol used to inoculate U.S. children against many infectious diseases. Continue reading →