Do Son A PoC has been released for two High-severity flaws in the Linux HID core, allowing malicious USB devices to leak up to 64KB of kernel memory.
Cisco patches a Critical 9.9 zero-day (CVE-2025-20333) in ASA/FTD VPN web servers. Authenticated attackers can exploit the flaw for root-level Remote Code Execution.
Cisco disclosed a Critical RCE flaw in its Firewall ASA/FTD, IOS, IOS XE, and IOS XR web services. Unauthenticated attackers can gain root access.
Malicious Rust crates, downloaded 8,400+ times, were found to be typosquatting legitimate libraries to scan source code and steal Solana and Ethereum private keys.
Cisco patches CVE-2025-20362, a medium-high zero-day vulnerability in ASA/FTD VPN web servers that is being exploited to gain unauthorized access to restricted resources.
Apache Airflow 3.0.3 has a bug (CVE-2025-54831) exposing sensitive connection details, including passwords, to all users with only READ permissions. Update immediately.
GTIG reveals BRICKSTORM, a stealthy Go backdoor linked to China-nexus UNC5221, targeting US legal/SaaS firms to steal IP and establish long-term espionage access.
GitLab urges immediate upgrade to patch versions 18.4.1+ for high-severity DoS flaws that allowed unauthenticated attackers to crash self-managed instances.
NVIDIA released an urgent update for its Megatron-LM LLM framework, patching four high-severity code injection flaws that could allow attackers to compromise AI workflows.
Microsoft blocked a credential phishing campaign that used AI to generate complex, verbose code in an SVG file to obfuscate its payload and evade defenses.
The Lone None group uses fake copyright notices to deliver a new stealer malware that focuses on crypto theft via clipboard replacement and utilizes Telegram for C2.
A vulnerability dubbed "LNK Stomping" (CVE-2024-38217) is actively used to strip the 'Mark of the Web' from LNK files, bypassing Windows security policies.
cybernewswire
Austin / TX, United States, 25th September 2025, CyberNewsWire
Two WordPress Core vulnerabilities (XSS and Info Exposure) affecting versions up to 6.8.2 were accidentally exposed before patches were ready.
NVIDIA open-sources its Audio2Face model and SDK, allowing devs to easily create lifelike, real-time facial expressions and lip sync from any audio.Export to Sheets
Instagram hits 3 billion monthly active users. Meta is redesigning the app to make Reels the default content feed to compete in the short-form video war.
Qualcomm unveils APV (Advanced Professional Video), an open-source encoding standard for professional video capture designed to challenge Apple's ProRes.
Qualcomm unveils the 3nm Snapdragon X2 Elite Extreme (5.0GHz CPU, 80 TOPS NPU) and X2 Elite, built to power a new generation of high-speed AI PCs.
Qualcomm unveils the Snapdragon 8 Elite Gen 5 (3nm): up to 37% faster AI, Oryon CPU, and Agentic AI architecture for proactive digital companions.
Google releases the Chrome DevTools MCP server, allowing AI coding agents to use powerful debugging tools to diagnose, optimize, and validate web pages.
Luxembourg, Luxembourg, 25th September 2025, CyberNewsWire
A critical SNMP flaw (CVE-2025-20352) in Cisco IOS/IOS XE is being actively exploited, allowing attackers root access. Urgent patching and mitigation required!