Vulnerabilities

Understanding DocumentDB’s Network Security Trade-offs: The VPC Challenge

Database Protection, Vulnerabilities /

Understanding DocumentDB’s Network Security Trade-offs: The VPC Challenge 2025-08-05 at 17:20 By Selam Gebreananeya AWS DocumentDB by default is securely isolated within a VPC, unreachable from the public internet, what could be more secure? This security architecture can create unexpected challenges and complexity. The root cause? The very VPC isolation designed to protect DocumentDB can […]

Understanding DocumentDB’s Network Security Trade-offs: The VPC Challenge Read More »

Vibe Coding: When Everyone’s a Developer, Who Secures the Code?

AI, appsec, Artificial Intelligence, software, vibe coding, Vulnerabilities /

Vibe Coding: When Everyone’s a Developer, Who Secures the Code? 2025-08-05 at 16:42 By Kevin Townsend As AI makes software development accessible to all, security teams face a new challenge: protecting applications built by non-developers at unprecedented speed and scale. The post Vibe Coding: When Everyone’s a Developer, Who Secures the Code? appeared first on

Vibe Coding: When Everyone’s a Developer, Who Secures the Code? Read More »

Microsoft Offers $5 Million at Zero Day Quest Hacking Contest

AI, bug bounty program, hacking competition, Microsoft, Vulnerabilities, Zero Day Quest /

Microsoft Offers $5 Million at Zero Day Quest Hacking Contest 2025-08-05 at 11:38 By Ionut Arghire Research demonstrating high-impact cloud and AI security flaws will be rewarded at Microsoft’s Zero Day Quest competition in spring 2026. The post Microsoft Offers $5 Million at Zero Day Quest Hacking Contest appeared first on SecurityWeek. This article is

Microsoft Offers $5 Million at Zero Day Quest Hacking Contest Read More »

SonicWall Hunts for Zero-Day Amid Surge in Firewall Exploitation

Featured, firewall, Ransomware, SonicWall, Vulnerabilities, Zero-Day /

SonicWall Hunts for Zero-Day Amid Surge in Firewall Exploitation 2025-08-05 at 10:58 By Ionut Arghire Threat actors might be exploiting a zero-day vulnerability in SonicWall firewalls in a fresh wave of ransomware attacks. The post SonicWall Hunts for Zero-Day Amid Surge in Firewall Exploitation appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

SonicWall Hunts for Zero-Day Amid Surge in Firewall Exploitation Read More »

Nvidia Triton Vulnerabilities Pose Big Risk to AI Models

AI, Artificial Intelligence, NVIDIA, Triton Inference Server, Vulnerabilities, vulnerability /

Nvidia Triton Vulnerabilities Pose Big Risk to AI Models 2025-08-04 at 21:22 By Eduard Kovacs Nvidia has patched over a dozen vulnerabilities in Triton Inference Server, including another set of vulnerabilities that threaten AI systems.  The post Nvidia Triton Vulnerabilities Pose Big Risk to AI Models appeared first on SecurityWeek. This article is an excerpt

Nvidia Triton Vulnerabilities Pose Big Risk to AI Models Read More »

Several Vulnerabilities Patched in AI Code Editor Cursor 

Cursor, Vulnerabilities, vulnerability /

Several Vulnerabilities Patched in AI Code Editor Cursor  2025-08-04 at 13:24 By Ionut Arghire Attackers could silently modify sensitive MCP files to trigger the execution of arbitrary code without requiring user approval. The post Several Vulnerabilities Patched in AI Code Editor Cursor  appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original

Several Vulnerabilities Patched in AI Code Editor Cursor  Read More »

Microsoft Boosts .NET Bounty Program Rewards to $40,000

.NET, bug bounty program, Microsoft, Vulnerabilities /

Microsoft Boosts .NET Bounty Program Rewards to $40,000 2025-08-01 at 16:01 By Ionut Arghire Valid, complete reports detailing remote code execution or elevation of privilege bugs in .NET qualify for the maximum rewards. The post Microsoft Boosts .NET Bounty Program Rewards to $40,000 appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View

Microsoft Boosts .NET Bounty Program Rewards to $40,000 Read More »

$1 Million Offered for WhatsApp Exploit at Pwn2Own Ireland 2025

exploit, Pwn2Own, Pwn2Own 2025, Vulnerabilities, WhatsApp /

$1 Million Offered for WhatsApp Exploit at Pwn2Own Ireland 2025 2025-08-01 at 10:07 By Eduard Kovacs Meta is sponsoring ZDI’s Pwn2Own hacking competition, where participants can earn big prizes for smartphone, WhatsApp and wearable device exploits. The post $1 Million Offered for WhatsApp Exploit at Pwn2Own Ireland 2025 appeared first on SecurityWeek. This article is

$1 Million Offered for WhatsApp Exploit at Pwn2Own Ireland 2025 Read More »

Back Up With Care, But Neglecting Patches can Leave You in Despair!

Database Protection, Vulnerabilities /

Back Up With Care, But Neglecting Patches can Leave You in Despair! 2025-07-31 at 23:23 By Rox Harvey Rosales CVE-2024-7348, which was discovered by Noah Misch, is a race condition vulnerability affecting multiple versions of PostgreSQL when using the `pg_dump` utility. An attacker with sufficient privileges can exploit this vulnerability to execute arbitrary SQL commands

Back Up With Care, But Neglecting Patches can Leave You in Despair! Read More »

Google Project Zero Tackles Upstream Patch Gap With New Policy

disclosure policy, Google Project Zero, Vulnerabilities, vulnerability /

Google Project Zero Tackles Upstream Patch Gap With New Policy 2025-07-31 at 12:24 By Ionut Arghire Google Project Zero now publicly shares the discovery of a vulnerability and when its 90-day disclosure deadline expires. The post Google Project Zero Tackles Upstream Patch Gap With New Policy appeared first on SecurityWeek. This article is an excerpt

Google Project Zero Tackles Upstream Patch Gap With New Policy Read More »

Boosting Your Microsoft Email Security with Trustwave’s Managed Phishing Service

Artificial Intelligence, email security, Microsoft Security, Tips & Tricks, Vulnerabilities /

Boosting Your Microsoft Email Security with Trustwave’s Managed Phishing Service 2025-07-30 at 19:22 By It seems everyone loves phishing attacks. This article is an excerpt from Trustwave Blog View Original Source

Boosting Your Microsoft Email Security with Trustwave’s Managed Phishing Service Read More »

Apple Patches Safari Vulnerability Flagged as Exploited Against Chrome

apple, exploited, iOS, macOS, Vulnerabilities, WebKit /

Apple Patches Safari Vulnerability Flagged as Exploited Against Chrome 2025-07-30 at 11:54 By Ionut Arghire Tracked as CVE-2025-6558, the flaw was found in Chrome’s ANGLE and GPU components and was flagged as exploited by Google TAG. The post Apple Patches Safari Vulnerability Flagged as Exploited Against Chrome appeared first on SecurityWeek. This article is an

Apple Patches Safari Vulnerability Flagged as Exploited Against Chrome Read More »

Organizations Warned of Exploited PaperCut Flaw

CISA KEV, exploited, PaperCut, Vulnerabilities, vulnerability /

Organizations Warned of Exploited PaperCut Flaw 2025-07-29 at 14:52 By Ionut Arghire Threat actors are exploiting a two-year-old vulnerability in PaperCut that allows them to execute arbitrary code remotely. The post Organizations Warned of Exploited PaperCut Flaw appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Organizations Warned of Exploited PaperCut Flaw Read More »

Sploitlight: macOS Vulnerability Leaks Sensitive Information

macOS, Sploitlight, Spotlight, Vulnerabilities, vulnerability /

Sploitlight: macOS Vulnerability Leaks Sensitive Information 2025-07-29 at 14:22 By Ionut Arghire The TCC bypass could expose information cached by Apple Intelligence, including geolocation and biometric data. The post Sploitlight: macOS Vulnerability Leaks Sensitive Information appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Sploitlight: macOS Vulnerability Leaks Sensitive Information Read More »

Flaw Allowing Website Takeover Found in WordPress Plugin With 400k Installations

email security, exploited, Post SMTP, Vulnerabilities, WordPress /

Flaw Allowing Website Takeover Found in WordPress Plugin With 400k Installations 2025-07-28 at 11:33 By Eduard Kovacs The Post SMTP email delivery WordPress plugin is affected by a critical vulnerability and half of websites using it remain unpatched. The post Flaw Allowing Website Takeover Found in WordPress Plugin With 400k Installations appeared first on SecurityWeek.

Flaw Allowing Website Takeover Found in WordPress Plugin With 400k Installations Read More »

The Danger of Weak Passwords: UK Trucking Firm Attacked and Permanently Shut Down

data breach, Database Protection, News, Tips & Tricks, Vulnerabilities /

The Danger of Weak Passwords: UK Trucking Firm Attacked and Permanently Shut Down 2025-07-25 at 20:18 By Discover how a single weak password led to a UK trucking firm’s permanent shutdown by a ransomware attack, highlighting the critical link between passwords and enterprise cybersecurity. Learn actionable strategies for creating strong passwords and implementing broader cybersecurity

The Danger of Weak Passwords: UK Trucking Firm Attacked and Permanently Shut Down Read More »

No Patch for Flaw Exposing Hundreds of LG Cameras to Remote Hacking

camera, LG, Vulnerabilities, vulnerability /

No Patch for Flaw Exposing Hundreds of LG Cameras to Remote Hacking 2025-07-25 at 15:57 By Eduard Kovacs LG Innotek LNV5110R security cameras are affected by a vulnerability that can be exploited for unauthenticated remote code execution. The post No Patch for Flaw Exposing Hundreds of LG Cameras to Remote Hacking appeared first on SecurityWeek.

No Patch for Flaw Exposing Hundreds of LG Cameras to Remote Hacking Read More »

Mitel Patches Critical Flaw in Enterprise Communication Platform

Mitel, Vulnerabilities, vulnerability /

Mitel Patches Critical Flaw in Enterprise Communication Platform 2025-07-25 at 15:00 By Ionut Arghire An authentication bypass vulnerability in Mitel MiVoice MX-ONE could allow attackers to access user or admin accounts on the system. The post Mitel Patches Critical Flaw in Enterprise Communication Platform appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

Mitel Patches Critical Flaw in Enterprise Communication Platform Read More »

SonicWall Patches Critical SMA 100 Vulnerability, Warns of Recent Malware Attack

Malware, SonicWall, Vulnerabilities, vulnerability /

SonicWall Patches Critical SMA 100 Vulnerability, Warns of Recent Malware Attack 2025-07-24 at 13:18 By Ionut Arghire SonicWall advises organizations to patch SMA 100 appliances and look for IoCs associated with Overstep malware attacks. The post SonicWall Patches Critical SMA 100 Vulnerability, Warns of Recent Malware Attack appeared first on SecurityWeek. This article is an

SonicWall Patches Critical SMA 100 Vulnerability, Warns of Recent Malware Attack Read More »

Critical Vulnerabilities Patched in Sophos Firewall

firewall, Network Security, Sophos, Vulnerabilities, vulnerability /

Critical Vulnerabilities Patched in Sophos Firewall 2025-07-23 at 14:35 By Ionut Arghire Sophos has patched five vulnerabilities in Sophos Firewall that could allow remote attackers to execute arbitrary code. The post Critical Vulnerabilities Patched in Sophos Firewall appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Critical Vulnerabilities Patched in Sophos Firewall Read More »

Scroll to Top