cybernewswire
Horsham, United Kingdom, 25th November 2025, CyberNewsWire
Latest news
Do Son
Oligo Security researchers have uncovered a dangerous chain of vulnerabilities in Fluent Bit, the popular, lightweight telemetry...
Apache has issued an important security advisory warning that Apache Syncope, the widely used open-source identity management...
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent nationwide alert warning that multiple cyber...
A newly disclosed critical vulnerability in the Sneeit Framework — a widely used WordPress plugin powering premium...
HashiCorp has released an important security advisory addressing a misconfiguration flaw in the Vault Terraform Provider that...
Critical Unpatched Flaw: Vivotek EOL IP Cameras Exposed to Unauthenticated RCE via Command Injection
Critical Unpatched Flaw: Vivotek EOL IP Cameras Exposed to Unauthenticated RCE via Command Injection
The Akamai Security Intelligence and Response Team (SIRT) has uncovered a previously undocumented — and still widely...
A newly disclosed vulnerability in R.V.R Elettronica’s TEX broadcast hardware has been assigned CVE-2025-63207, scoring 9.8 Critical...
Kaspersky Lab has published new findings revealing how the ToddyCat APT group has significantly upgraded its cyber-espionage...
A newly published investigation by the ENKI WhiteHat Threat Research Team reveals a rapidly expanding and increasingly...
Explore SearchGPT, OpenAI's prototype search engine that integrates AI models and web data. Get the answers you need quickly and easily.
CVE-2024-40767 has been discovered in OpenStack Nova, the open-source cloud computing platform's core component for managing virtual servers
A security vulnerability, CVE-2021-38578, has been discovered in a wide range of HPE ProLiant, Alletra, Synergy, Apollo, and Edgeline servers
FLUXROOT has been identified in Latin America, utilizing serverless Google Cloud projects to orchestrate phishing attacks
CVE-2023-46229 and CVE-2023-44467 have the potential to allow attackers to execute arbitrary code and access sensitive data
A stealthy cyber campaign is leveraging a critical flaw in Microsoft Windows SmartScreen, the built-in security feature
Stay informed about a critical flaw, CVE-2023-45249, in Acronis Cyber Infrastructure. Learn how this flaw could compromise your systems
Samsung has introduced the Auto Blocker feature, which entirely prevents the sideloading of applications from unauthorized sources
This vulnerability, designated CVE-2024-37084, has received a CVSS score of 9.8, indicating its critical severity.
CrowdStrike has not publicly responded to the alleged data leak. If the data is legitimate, the consequences could be severe
Resecurity has uncovered a widespread campaign exploiting critical vulnerabilities in ServiceNow, a popular platform for digital workflows
Google Chrome sends suspicious files to the company's servers for deeper scanning if the user has enabled Enhanced Protection in Safe Browsing
Yehuda Smirnov has uncovered a critical vulnerability in Microsoft's Windows Hello for Business (WHfB) authentication system
Red Art Games has announced that it has fallen victim to a large-scale cyberattack, resulting in the compromise of numerous customer data
Network traffic analysis indicated that the Quad7 botnet is used for Password Spraying attacks on Microsoft 365 accounts
Reddit has implemented a sweeping block on major search engine crawlers, with the notable exception of Google
The most severe vulnerability tracked as CVE-2024-6327, resides in Telerik Report Server, a popular solution for managing business reports
JetBrains TeamCity has been found to contain a high-severity security vulnerability (CVE-2024-41827, CVSS 7.4).
GitLab, the widely-used code collaboration platform, released a security update today that addresses a half-dozen vulnerabilities
The vulnerabilities, tracked as CVE-2024-37998 (CVSS 9.8) and CVE-2024-39601, affect the firmware of these products.
HotPage installs a driver capable of injecting code into remote processes, along with two libraries that intercept and modify browser network traffic
ISC, the maintainers of the widely-used BIND DNS server software, has released security updates to address four high-severity vulnerabilities