vulnerability

CISA: Patch Samsung flaw exploited to deliver spyware (CVE-2025-21042)

November 11, 2025

CISA has added CVE-2025-21042, a vulnerability affecting Samsung mobile devices, to its Known Exploited Vulnerabilities (KEV) catalog, and has ordered US federal civilian …

Cisco fixes critical UCCX flaws, patch ASAP! (CVE-2025-20358, CVE-2025-20354)

November 6, 2025

Cisco has fixed two critical vulnerabilities (CVE-2025-20358, CVE-2025-20354) affecting Unified Contact Center Express (UCCX), which may allow attackers to bypass …

Critical Control Web Panel vulnerability is actively exploited (CVE-2025-48703)

November 5, 2025

On Tuesday, CISA added two vulnerabilities to its Known Exploited Vulnerabilities catalog: CVE-2025-11371, which affects Gladinet’s CentreStack and Triofox file-sharing …

Unpatched Windows vulnerability continues to be exploited by APTs (CVE-2025-9491)

October 31, 2025

A Windows vulnerability (CVE-2025-9491, aka ZDI-CAN-25373) that state-sponsored threat actors and cybercrime groups have been quietly leveraging since at least 2017 continues …

PoC code drops for remotely exploitable BIND 9 DNS flaw (CVE-2025-40778)

October 28, 2025

A high-severity vulnerability (CVE-2025-40778) affecting BIND 9 DNS resolvers could be leveraged by remote, unauthenticated attackers to manipulate DNS entries via cache …

Microsoft releases urgent fix for actively exploited WSUS vulnerability (CVE-2025-59287)

October 24, 2025

Microsoft has released an out-of-band security update that “comprehensively” addresses CVE-2025-59287, a remote code execution vulnerability in the Windows Server …

Critical Adobe Commerce, Magento vulnerability under attack (CVE-2025-54236)

October 23, 2025

Attackers are trying to exploit CVE-2025-54236, a critical vulnerability affecting Adobe Commerce and Magento Open Source, Sansec researchers have warned. The company blocked …

Hard-coded credentials found in Moxa industrial security appliances, routers (CVE-2025-6950)

October 20, 2025

Moxa has fixed 5 vulnerabilities in its industrial network security appliances and routers, including a remotely exploitable flaw (CVE-2025-6950) that may result in complete …

“Perfect” Adobe Experience Manager vulnerability is being exploited (CVE-2025-54253)

October 16, 2025

CISA has added CVE-2025-54253, a misconfiguration vulnerability in Adobe Experience Manager (AEM) Forms on Java Enterprise Edition (JEE), to its Known Exploited …

Humanoid robot found vulnerable to Bluetooth hack, data leaks to China

October 16, 2025

Alias Robotics has published an analysis of the Unitree G1 humanoid robot, concluding that the device can be exploited as a tool for espionage and cyber attacks. A robot that …

Another remotely exploitable Oracle EBS vulnerability requires your attention (CVE-2025-61884)

October 12, 2025

Oracle has revealed the existence of yet another remotely exploitable Oracle E-Business Suite vulnerability (CVE-2025-61884). About CVE-2025-61884 CVE-2025-61884 is a …

Redis patches critical “RediShell” RCE vulnerability, update ASAP! (CVE-2025-49844)

October 7, 2025

Redis, the company behind the widely used in-memory data structure store of the same name, has released patches for a critical vulnerability (CVE-2025-49844) that may allow …