Vulnerabilities

Critical Oracle Identity Manager Flaw Possibly Exploited as Zero-Day

exploited, Oracle, Vulnerabilities, vulnerability, Zero-Day /

Critical Oracle Identity Manager Flaw Possibly Exploited as Zero-Day 2025-11-21 at 15:47 By Eduard Kovacs CVE-2025-61757 is an unauthenticated remote code execution vulnerability affecting Oracle Identity Manager. The post Critical Oracle Identity Manager Flaw Possibly Exploited as Zero-Day appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Critical Oracle Identity Manager Flaw Possibly Exploited as Zero-Day Read More »

SonicWall Patches High-Severity Flaws in Firewalls, Email Security Appliance

DoS, firewall, SonicWall, Vulnerabilities, vulnerability /

SonicWall Patches High-Severity Flaws in Firewalls, Email Security Appliance 2025-11-21 at 14:41 By Ionut Arghire The vulnerabilities could be exploited to cause a denial-of-service (DoS) condition, execute arbitrary code, or access arbitrary files and directories. The post SonicWall Patches High-Severity Flaws in Firewalls, Email Security Appliance appeared first on SecurityWeek. This article is an excerpt

SonicWall Patches High-Severity Flaws in Firewalls, Email Security Appliance Read More »

SquareX and Perplexity Quarrel Over Alleged Comet Browser Vulnerability

AI, Artificial Intelligence, browser, Comet, controversy, Featured, Perplexity, SquareX, Vulnerabilities, vulnerability /

SquareX and Perplexity Quarrel Over Alleged Comet Browser Vulnerability 2025-11-21 at 13:20 By Eduard Kovacs SquareX claims to have found a way to abuse a hidden Comet API to execute local commands, but Perplexity says the research is fake. The post SquareX and Perplexity Quarrel Over Alleged Comet Browser Vulnerability appeared first on SecurityWeek. This

SquareX and Perplexity Quarrel Over Alleged Comet Browser Vulnerability Read More »

Vulnerability Allowed Scraping of 3.5 Billion WhatsApp Accounts

data breach, Data leak, Data Protection, enumeration, Vulnerabilities, WhatsApp /

Vulnerability Allowed Scraping of 3.5 Billion WhatsApp Accounts 2025-11-20 at 14:06 By Eduard Kovacs Researchers demonstrated a now-patched vulnerability that could have been used to enumerate all WhatsApp accounts. The post Vulnerability Allowed Scraping of 3.5 Billion WhatsApp Accounts appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Vulnerability Allowed Scraping of 3.5 Billion WhatsApp Accounts Read More »

Recent 7-Zip Vulnerability Exploited in Attacks

7-Zip, exploited, Featured, Vulnerabilities, vulnerability /

Recent 7-Zip Vulnerability Exploited in Attacks 2025-11-20 at 13:09 By Ionut Arghire A proof-of-concept (PoC) exploit targeting the high-severity remote code execution (RCE) bug exists. The post Recent 7-Zip Vulnerability Exploited in Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Recent 7-Zip Vulnerability Exploited in Attacks Read More »

SolarWinds Patches Three Critical Serv-U Vulnerabilities

SolarWinds, Vulnerabilities, vulnerability /

SolarWinds Patches Three Critical Serv-U Vulnerabilities 2025-11-20 at 09:32 By Eduard Kovacs SolarWinds Serv-U is affected by vulnerabilities that can be exploited for remote code execution. The post SolarWinds Patches Three Critical Serv-U Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

SolarWinds Patches Three Critical Serv-U Vulnerabilities Read More »

SpiderLabs IDs New Banking Trojan Distributed Through WhatsApp

Emerging Threats, News, Vulnerabilities /

SpiderLabs IDs New Banking Trojan Distributed Through WhatsApp 2025-11-19 at 19:03 By Nathaniel Morales, John Basmayor, and Nikita Kazymirskyi Trustwave SpiderLabs researchers have recently identified a banking Trojan we dubbed Eternidade Stealer, which is distributed through WhatsApp hijacking and social engineering lures. In this blog post, we will break down the techniques used in the

SpiderLabs IDs New Banking Trojan Distributed Through WhatsApp Read More »

Fortinet Discloses Second Exploited FortiWeb Zero-Day in a Week

exploited, Featured, Fortinet, FortiWeb, Vulnerabilities, vulnerability, Zero-Day /

Fortinet Discloses Second Exploited FortiWeb Zero-Day in a Week 2025-11-19 at 11:49 By Ionut Arghire An OS command injection flaw, the exploited zero-day allows attackers to execute arbitrary code on the underlying system. The post Fortinet Discloses Second Exploited FortiWeb Zero-Day in a Week appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

Fortinet Discloses Second Exploited FortiWeb Zero-Day in a Week Read More »

Meta Paid Out $4 Million via Bug Bounty Program in 2025

bug bounty program, Meta, Vulnerabilities, WhatsApp /

Meta Paid Out $4 Million via Bug Bounty Program in 2025 2025-11-18 at 17:31 By Eduard Kovacs The total amount of money given to bug bounty hunters by the social media giant has reached $25 million. The post Meta Paid Out $4 Million via Bug Bounty Program in 2025 appeared first on SecurityWeek. This article

Meta Paid Out $4 Million via Bug Bounty Program in 2025 Read More »

Chrome 142 Update Patches Exploited Zero-Day

Chrome, exploited, Vulnerabilities, Zero-Day /

Chrome 142 Update Patches Exploited Zero-Day 2025-11-18 at 09:33 By Ionut Arghire The flaw was reported by Google’s Threat Analysis Group and was likely exploited by a commercial spyware vendor. The post Chrome 142 Update Patches Exploited Zero-Day appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Chrome 142 Update Patches Exploited Zero-Day Read More »

Widespread Exploitation of XWiki Vulnerability Observed

exploited, Vulnerabilities, XWiki /

Widespread Exploitation of XWiki Vulnerability Observed 2025-11-17 at 13:06 By Ionut Arghire The exploitation of the recent XWiki vulnerability has expanded to botnets, cryptocurrency miners, scanners, and custom tools. The post Widespread Exploitation of XWiki Vulnerability Observed appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Widespread Exploitation of XWiki Vulnerability Observed Read More »

Fortinet Confirms Active Exploitation of Critical FortiWeb Vulnerability

CVE-2025-64446, Featured, Fortinet, Network Security, Vulnerabilities /

Fortinet Confirms Active Exploitation of Critical FortiWeb Vulnerability 2025-11-14 at 23:49 By Ionut Arghire Security firms say the flaw has been actively exploited for weeks, even as Fortinet quietly shipped fixes and CISA added the bug to its KEV catalog. The post Fortinet Confirms Active Exploitation of Critical FortiWeb Vulnerability appeared first on SecurityWeek. This

Fortinet Confirms Active Exploitation of Critical FortiWeb Vulnerability Read More »

In Other News: Deepwatch Layoffs, macOS Vulnerability, Amazon AI Bug Bounty

Artificial Intelligence, In Other News, Vulnerabilities /

In Other News: Deepwatch Layoffs, macOS Vulnerability, Amazon AI Bug Bounty 2025-11-14 at 17:38 By SecurityWeek News Other noteworthy stories that might have slipped under the radar: EchoGram attack undermines AI guardrails, Asahi brewer still crippled after ransomware attack, Sora 2 system prompt uncovered. The post In Other News: Deepwatch Layoffs, macOS Vulnerability, Amazon AI

In Other News: Deepwatch Layoffs, macOS Vulnerability, Amazon AI Bug Bounty Read More »

Imunify360 Vulnerability Could Expose Millions of Sites to Hacking

AV, Imunigy360, Vulnerabilities, vulnerability, website security /

Imunify360 Vulnerability Could Expose Millions of Sites to Hacking 2025-11-14 at 15:22 By Eduard Kovacs A vulnerability in ImunifyAV can be exploited for arbitrary code execution by uploading a malicious file to shared servers. The post Imunify360 Vulnerability Could Expose Millions of Sites to Hacking appeared first on SecurityWeek. This article is an excerpt from

Imunify360 Vulnerability Could Expose Millions of Sites to Hacking Read More »

Microsoft Issues Emergency Patch for Windows Server Update Services RCE Vulnerability CVE-2025-59287

data breach, Emerging Threats, Threat Intelligence, Vulnerabilities /

Microsoft Issues Emergency Patch for Windows Server Update Services RCE Vulnerability CVE-2025-59287 2025-11-14 at 15:10 By Fernando Martinez LevelBlue Labs is tracking a severe vulnerability in Windows Server Update Services (WSUS), CVE-2025-59287, that allows attackers to remotely execute code without authentication and is being exploited by threat actors to compromise vulnerable Windows Server users. This

Microsoft Issues Emergency Patch for Windows Server Update Services RCE Vulnerability CVE-2025-59287 Read More »

Art and Science: Cyber and Physical Security Convergence Deficiencies in the Louvre Heist

News, Vulnerabilities /

Art and Science: Cyber and Physical Security Convergence Deficiencies in the Louvre Heist 2025-11-14 at 15:06 By William Evers and Anthony Abell Cyber meets physical security: Weak passwords and outdated systems may have opened the door to the thieves. A warning for all industries: The Louvre incident shows why converging cybersecurity and physical security is

Art and Science: Cyber and Physical Security Convergence Deficiencies in the Louvre Heist Read More »

Critical WatchGuard Firebox Vulnerability Exploited in Attacks

CISA KEV, exploited, Firebox, firewall, Vulnerabilities, WatchGuard /

Critical WatchGuard Firebox Vulnerability Exploited in Attacks 2025-11-13 at 14:40 By Ionut Arghire Tracked as CVE-2025-9242 (CVSS score of 9.3), the flaw leads to unauthenticated, remote code execution on vulnerable firewalls. The post Critical WatchGuard Firebox Vulnerability Exploited in Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Critical WatchGuard Firebox Vulnerability Exploited in Attacks Read More »

Cisco ISE, CitrixBleed 2 Vulnerabilities Exploited as Zero-Days: Amazon

Amazon, Cisco, Citrix, exploited, Featured, Vulnerabilities, Zero-Day /

Cisco ISE, CitrixBleed 2 Vulnerabilities Exploited as Zero-Days: Amazon 2025-11-13 at 11:57 By Ionut Arghire Amazon has seen a threat actor exploiting CVE-2025-20337 and CVE-2025-5777, two critical Cisco and Citrix vulnerabilities, as zero-days. The post Cisco ISE, CitrixBleed 2 Vulnerabilities Exploited as Zero-Days: Amazon appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

Cisco ISE, CitrixBleed 2 Vulnerabilities Exploited as Zero-Days: Amazon Read More »

Firefox 145 and Chrome 142 Patch High-Severity Flaws in Latest Releases

Chrome, Firefox, patch, Vulnerabilities, vulnerability /

Firefox 145 and Chrome 142 Patch High-Severity Flaws in Latest Releases 2025-11-13 at 07:38 By Ionut Arghire Google and Mozilla have released fresh Chrome and Firefox updates that address multiple high-severity security defects. The post Firefox 145 and Chrome 142 Patch High-Severity Flaws in Latest Releases appeared first on SecurityWeek. This article is an excerpt

Firefox 145 and Chrome 142 Patch High-Severity Flaws in Latest Releases Read More »

Google Paid Out $458,000 at Live Hacking Event

bug bounty program, bugSWAT, ESCAL8, Google, hacking competition, Vulnerabilities /

Google Paid Out $458,000 at Live Hacking Event 2025-11-12 at 14:44 By Ionut Arghire Researchers submitted 107 bug reports during the bugSWAT hacking event at the ESCAL8 conference in New Mexico. The post Google Paid Out $458,000 at Live Hacking Event appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Google Paid Out $458,000 at Live Hacking Event Read More »

Scroll to Top