Lanscope Endpoint Manager Zero-Day Exploited in the Wild 2025-10-23 at 13:05 By Ionut Arghire The bug has been exploited in the wild as a zero-day and the US cybersecurity agency CISA has added it to its KEV catalog. The post Lanscope Endpoint Manager Zero-Day Exploited in the Wild appeared first on SecurityWeek. This article is […]
Lanscope Endpoint Manager Zero-Day Exploited in the Wild Read More »
TARmageddon Flaw in Popular Rust Library Leads to RCE 2025-10-22 at 20:40 By Ionut Arghire The vulnerability impacts multiple Rust tar parsers, allowing attackers to smuggle additional archive entries. The post TARmageddon Flaw in Popular Rust Library Leads to RCE appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
TARmageddon Flaw in Popular Rust Library Leads to RCE Read More »
Public Sector Ransomware Attacks Relentlessly Continue 2025-10-22 at 17:12 By In 2025, 36 years after the first ransomware attack was recorded, actors continue to zero in on the public sector, and there is no evidence they will slow down any time soon. In fact, our numbers suggest that ransomware attacks against government organizations are ramping […]
Public Sector Ransomware Attacks Relentlessly Continue Read More »
Oracle Releases October 2025 Patches 2025-10-22 at 13:03 By Ionut Arghire The Critical Patch Update contains 374 new security patches that resolve many vulnerabilities. The post Oracle Releases October 2025 Patches appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Oracle Releases October 2025 Patches Read More »
Hackers Earn Over $520,000 on First Day of Pwn2Own Ireland 2025 2025-10-22 at 10:36 By Eduard Kovacs Participants exploited 34 previously unknown vulnerabilities to hack printers, NAS devices, and smart home products. The post Hackers Earn Over $520,000 on First Day of Pwn2Own Ireland 2025 appeared first on SecurityWeek. This article is an excerpt from […]
Hackers Earn Over $520,000 on First Day of Pwn2Own Ireland 2025 Read More »
API Security: Challenges for a Secure Digital Frontier 2025-10-21 at 19:13 By Dora Miranda Organizations continue their digital transformation, with APIs now serving as the main communication links between applications, platforms, services, and partners. This article is an excerpt from Trustwave Blog View Original Source
API Security: Challenges for a Secure Digital Frontier Read More »
Over 73,000 WatchGuard Firebox Devices Impacted by Recent Critical Flaw 2025-10-21 at 13:46 By Ionut Arghire Affecting the Fireware OS iked process, the vulnerability can lead to remote code execution and does not require authentication. The post Over 73,000 WatchGuard Firebox Devices Impacted by Recent Critical Flaw appeared first on SecurityWeek. This article is an […]
Over 73,000 WatchGuard Firebox Devices Impacted by Recent Critical Flaw Read More »
CISA Confirms Exploitation of Latest Oracle EBS Vulnerability 2025-10-21 at 11:54 By Eduard Kovacs The cybersecurity agency has added CVE-2025-61884 to its Known Exploited Vulnerabilities (KEV) catalog. The post CISA Confirms Exploitation of Latest Oracle EBS Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
CISA Confirms Exploitation of Latest Oracle EBS Vulnerability Read More »
ConnectWise Patches Critical Flaw in Automate RMM Tool 2025-10-20 at 16:07 By Ionut Arghire Attackers could exploit vulnerable deployments to intercept and tamper with communications in certain configurations. The post ConnectWise Patches Critical Flaw in Automate RMM Tool appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
ConnectWise Patches Critical Flaw in Automate RMM Tool Read More »
Vulnerability in Dolby Decoder Can Allow Zero-Click Attacks 2025-10-20 at 12:49 By Ionut Arghire On Android, the out-of-bounds write issue can be triggered during the processing of media files without user interaction. The post Vulnerability in Dolby Decoder Can Allow Zero-Click Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]
Vulnerability in Dolby Decoder Can Allow Zero-Click Attacks Read More »
The F5 BIG-IP Source Code Breach 2025-10-17 at 20:17 By Karl Sigler On August 9, F5 discovered that multiple systems were compromised by what it is calling a “highly sophisticated nation-state threat actor” who maintained “long-term, persistent access to certain F5 systems”. These included the BIG-IP product development environment and engineering knowledge management platform. That […]
The F5 BIG-IP Source Code Breach Read More »
In Other News: CrowdStrike Vulnerabilities, CISA Layoffs, Mango Data Breach 2025-10-17 at 17:00 By SecurityWeek News Other noteworthy stories that might have slipped under the radar: Capita fined £14 million, ICTBroadcast vulnerability exploited, Spyware maker NSO acquired. The post In Other News: CrowdStrike Vulnerabilities, CISA Layoffs, Mango Data Breach appeared first on SecurityWeek. This article […]
In Other News: CrowdStrike Vulnerabilities, CISA Layoffs, Mango Data Breach Read More »
Over $3 Million in Prizes Offered at Pwn2Own Automotive 2026 2025-10-17 at 15:59 By Ionut Arghire Set for January 2026 at Automotive World in Tokyo, the contest will have six categories, including Tesla, infotainment systems, EV chargers, and automotive OSes. The post Over $3 Million in Prizes Offered at Pwn2Own Automotive 2026 appeared first on […]
Over $3 Million in Prizes Offered at Pwn2Own Automotive 2026 Read More »
‘Highest Ever’ Severity Score Assigned by Microsoft to ASP.NET Core Vulnerability 2025-10-17 at 15:59 By Ionut Arghire CVE-2025-55315 is an HTTP request smuggling bug leading to information leaks, file content tampering, and server crashes. The post ‘Highest Ever’ Severity Score Assigned by Microsoft to ASP.NET Core Vulnerability appeared first on SecurityWeek. This article is an […]
‘Highest Ever’ Severity Score Assigned by Microsoft to ASP.NET Core Vulnerability Read More »
Gladinet Patches Exploited CentreStack Vulnerability 2025-10-17 at 11:19 By Ionut Arghire The unauthenticated local file inclusion bug allows attackers to retrieve the machine key and execute code remotely via a ViewState deserialization issue. The post Gladinet Patches Exploited CentreStack Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Gladinet Patches Exploited CentreStack Vulnerability Read More »
SocGholish: Turning Application Updates into Vexing Infections 2025-10-16 at 17:45 By Cris Tomboc This blog is the latest in a series that delves into the deep research conducted daily by the Trustwave SpiderLabs Threat Operations team on major threat actor groups and malware currently operating globally. This article is an excerpt from Trustwave Blog View […]
SocGholish: Turning Application Updates into Vexing Infections Read More »
AISLE Emerges From Stealth With AI-Based Reasoning System That Remediates Vulnerabilities on the Fly 2025-10-16 at 17:45 By Kevin Townsend AISLE aims to automate the vulnerability remediation process by detecting, exploiting, and patching software vulnerabilities in real time. The post AISLE Emerges From Stealth With AI-Based Reasoning System That Remediates Vulnerabilities on the Fly appeared […]
Organizations Warned of Exploited Adobe AEM Forms Vulnerability 2025-10-16 at 17:45 By Ionut Arghire A public PoC existed when Adobe patched the Experience Manager Forms (AEM Forms) bug in early August. The post Organizations Warned of Exploited Adobe AEM Forms Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Organizations Warned of Exploited Adobe AEM Forms Vulnerability Read More »
Data in the Dark: The Public Sector on the Dark Web 2025-10-15 at 16:44 By The dark web serves as a refuge for threat actors to gather intel, trade illicit goods and tools, and network with other cybercriminals. Aside from allowing threat actors to connect and learn from other individuals who share the same interests, […]
Data in the Dark: The Public Sector on the Dark Web Read More »
High-Severity Vulnerabilities Patched by Fortinet and Ivanti 2025-10-15 at 11:20 By Eduard Kovacs Fortinet and Ivanti have announced their October 2025 Patch Tuesday updates, which patch many vulnerabilities across their products. The post High-Severity Vulnerabilities Patched by Fortinet and Ivanti appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
High-Severity Vulnerabilities Patched by Fortinet and Ivanti Read More »