Latest Exploit news

A denial-of-service bug patched five months ago turned out to be unauthenticated RCE with CVSS 9.8. F5 confirmed nation-state exploitation of CVE-2025-53521 in BIG-IP APM, and CISA gave federal agencies three days to patch. 240,000+ instances are exposed.

Three miIO protocol flaws chain into root RCE on the Xiaomi C400 camera. TASZK Security Labs published the full exploit and a cloud jailbreak tool. A Wi-Fi-adjacent attacker needs no QR code and no physical access to the device.