Do Son CVE-2025-32896 in Apache SeaTunnel allows unauthenticated file read and RCE via REST API v1. Patch now by upgrading to version 2.3.11.
Phishing attacks using SVG files surged 1800%, exploiting JavaScript and PhaaS kits to bypass MFA and steal credentials, Trustwave warns.
CVE-2024-0132: This report details how an incomplete NVIDIA Container Toolkit patch allows container escape and denial-of-service (DoS) attacks, affecting AI systems and Docker on Linux
ViperSoftX malware is being used by Arabic-speaking attackers to target South Korea, according to ASEC. This malware uses PowerShell and spreads through torrents, delivering PureCrypter and Quasar RAT
A critical vulnerability in the Everest Forms WordPress plugin allows unauthenticated attackers to inject PHP Objects. Update to version 3.1.2 immediately to protect your site.
Learn about Precision-Validated Phishing, a sophisticated technique where attackers use real-time email validation to target specific users, making credential theft more effective and harder to detect.
Learn about AkiraBot, an AI-powered spam bot that uses OpenAI to generate personalized messages and flood website contact forms and chat widgets, as detailed in a SentinelLABS report.
A critical vulnerability (CVE-2025-3248) in Langflow allows unauthenticated remote attackers to fully compromise servers. Users are urged to upgrade to version 1.3.0 or restrict network access
A critical vulnerability in the InstaWP Connect WordPress plugin allows unauthenticated attackers to include and execute arbitrary files. Update to version 0.1.0.86 immediately.
OpenAI's ChatGPT rolls out a "Memory" feature, enabling personalized interactions by recalling past conversations.
Rapid7 reveals details of Ivanti zero-day CVE-2025-22457, a critical stack-based buffer overflow actively exploited by a China-linked group. Learn about the vulnerability and available patches.
A vulnerability in Jenkins Docker images (CVE-2025-32754, CVE-2025-32755) allows SSH host key reuse, enabling attackers to intercept and modify build processes. Update to jenkins/ssh-agent 6.11.2 to mitigate.
IBM's X-Force Red discovers RemoteMonologue, a novel DCOM attack that bypasses LSASS protection and steals NTLM credentials without payloads. Learn how it works and how to mitigate it.
Microsoft issues an emergency update, KB5002623, to fix crashes caused by the Office 2016 KB5002700 update. Learn how to download and install the fix to resolve Word, Excel, and Outlook issues.
Microsoft is rolling out a new Windows 11 feature that displays the estimated installation time for updates, helping users plan for system restarts. This feature, now in the Release Preview Channel, will provide estimated durations before restarting, and is expected to be widely available soon.
Joomla has released security patches for critical SQL injection (CVE-2025-25226) and MFA bypass (CVE-2025-25227) vulnerabilities. Learn how to protect your Joomla site with urgent updates.
Cloud Software Group addresses critical code execution and data function vulnerabilities (CVE-2025-3114, CVE-2025-3115) in Spotfire products. Upgrade to the latest version to mitigate risks.
Microsoft integrates AMSI with Exchange and SharePoint Server to enhance security against attacks like SSRF and web shell deployment, protecting against sophisticated threats.
BI.ZONE Threat Intelligence reports Sapphire Werewolf using updated Amethyst stealer malware to target energy companies, employing advanced evasion techniques.Sources and related content
Arista Networks addresses a critical vulnerability (CVE-2024-12378) in EOS that can cause cleartext transmission of sensitive data. Upgrade to a patched version to secure Vxlan tunnels.
The SideCopy APT group is evolving its tactics, using new methods like MSI packages and custom malware to target critical Indian sectors, including railways and oil & gas
A critical use-after-free vulnerability (CVE-2025-31498) has been discovered and patched in the c-ares DNS library. Update to version 1.34.5 to mitigate potential risks.