Do Son Fortinet fixes a critical TACACS+ authentication bypass flaw (CVE-2025-22252) affecting FortiOS and FortiProxy. Patch now to prevent admin-level access.
Interlock Ransomware breached AMTEC, leaking sensitive defense data and raising concerns over espionage and national security risks.
Branch Privilege Injection breaks Intel’s Spectre defenses via race conditions. ETH Zürich reveals PoC leaking memory on fully patched systems.
Attackers used Google Calendar invites and Unicode PUAs to deliver obfuscated malware via NPM. Aikido uncovers this novel supply chain attack.
Critical flaws in OpenPubkey and OPKSSH allow authentication bypass, exposing systems to unauthorized access. Patch now to stay secure.
Xerox fixes 40+ CVEs in April 2025 FreeFlow Print Server patch, enhancing security with updated Java, Firefox, OpenSSL, and encryption protocols.
A malicious PyPI package named 'solana-token' targeted Solana developers to steal code and secrets. Learn how it worked and how to stay safe.
cybernewswire
Cary, North Carolina, 14th May 2025, CyberNewsWire
Microsoft announces a 3% workforce reduction (around 6,000 jobs) as part of a strategic restructuring to align with its AI-driven market strategy.
Get the scoop! Google's pre-I/O Android Show reveals Android 16 with Material 3 Expressive, expanded Gemini AI across devices, and the new Find My Center.
A data breach at the Australian Human Rights Commission exposed over 100 sensitive webform documents online. Learn what happened and how it’s being addressed.
Hackers exploited GovDelivery to send fake TxTag toll emails via Indiana government accounts. Learn how the phishing scam unfolded and how to stay protected.
CVEs 2025-26389 and 2025-26390 let attackers run code as root or gain admin access on Siemens OZW web servers. Patching is strongly advised.
Ivanti patches CVE-2025-22462, a critical CVSS 9.8 auth bypass flaw in Neurons for ITSM. Risk of full admin access. Patch or restrict IIS access now.
A Varnish Cache flaw lets attackers smuggle HTTP requests and poison cached responses. Update to the patched release right away.
Zoom fixes critical CVE-2025-30663 flaw allowing local privilege escalation. Users urged to update Workplace apps and SDKs to version 6.4.0 or newer.
Bitnami Pgpool flaw (CVE-2025-22248) exposes PostgreSQL to unauthenticated access. Update to Pgpool 4.6.0-1 or Helm chart 16.0.0 to fix.
North Korean threat actor TA406 intensifies cyber espionage against Ukraine, using phishing and malware to gather political intelligence.
Siemens RUGGEDCOM devices face CVSS 9.9 command injection flaws. Authenticated users can execute root-level code via web tools. Patch to V2.16.5 now.
Chihuahua Stealer uses stealthy PowerShell loaders, CNG AES-GCM encryption, and .NET memory injection to exfiltrate browser and crypto wallet data.
Earth Ammit’s VENOM and TIDRONE campaigns target Taiwan and South Korea’s drone, military, and satellite sectors via stealthy supply chain attacks.
A critical vulnerability (CVE-2025-4632) in Samsung's MagicINFO Server puts digital signage at risk. Learn how attackers can gain control and what to do