Vulnerabilities

Hackers Target Popular Nx Build System in First AI-Weaponized Supply Chain Attack

Development, Featured, supply chain, Supply Chain Security, Vulnerabilities /

Hackers Target Popular Nx Build System in First AI-Weaponized Supply Chain Attack 2025-08-28 at 13:55 By Ionut Arghire With more than 4 million weekly downloads, the Nx build platform became the first known supply chain breach where hackers weaponized AI assistants for data theft. The post Hackers Target Popular Nx Build System in First AI-Weaponized […]

Hackers Target Popular Nx Build System in First AI-Weaponized Supply Chain Attack Read More »

Citrix Patches Exploited NetScaler Zero-Day

Citrix, CVE-2025-7775, Network Security, Vulnerabilities /

Citrix Patches Exploited NetScaler Zero-Day 2025-08-27 at 14:51 By Ionut Arghire Zero-day exploited in the wild forces Citrix and CISA to push emergency patch deadlines for federal agencies. The post Citrix Patches Exploited NetScaler Zero-Day appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Citrix Patches Exploited NetScaler Zero-Day Read More »

Organizations Warned of Exploited Git Vulnerability

CISA, CISA KEV, exploited, Git, Vulnerabilities /

Organizations Warned of Exploited Git Vulnerability 2025-08-26 at 11:29 By Ionut Arghire CISA urges federal agencies to immediately patch an exploited arbitrary file write vulnerability in Git that leads to remote code execution. The post Organizations Warned of Exploited Git Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Organizations Warned of Exploited Git Vulnerability Read More »

The Next Level of Managed Vulnerability Scanning: Authenticated and Unauthenticated Scans

Tips & Tricks, Vulnerabilities /

The Next Level of Managed Vulnerability Scanning: Authenticated and Unauthenticated Scans 2025-08-25 at 16:17 By Mary Eduel Neyra Trustwave, A LevelBlue Company, is a huge proponent of employing offensive security tactics to ensure a client is properly protected. This article is an excerpt from Trustwave Blog View Original Source

The Next Level of Managed Vulnerability Scanning: Authenticated and Unauthenticated Scans Read More »

MITRE Updates List of Most Common Hardware Weaknesses

CWE, hardware, MITRE, Vulnerabilities /

MITRE Updates List of Most Common Hardware Weaknesses 2025-08-22 at 10:52 By Ionut Arghire MITRE has updated the list of Most Important Hardware Weaknesses to align it with evolving hardware security challenges. The post MITRE Updates List of Most Common Hardware Weaknesses appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

MITRE Updates List of Most Common Hardware Weaknesses Read More »

Password Managers Vulnerable to Data Theft via Clickjacking

Data Protection, password manager, research, Vulnerabilities, vulnerability /

Password Managers Vulnerable to Data Theft via Clickjacking 2025-08-21 at 15:18 By Eduard Kovacs A researcher has tested nearly a dozen password managers and found that they were all vulnerable to clickjacking attacks. The post Password Managers Vulnerable to Data Theft via Clickjacking appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]

Password Managers Vulnerable to Data Theft via Clickjacking Read More »

Apple Patches Zero-Day Exploited in Targeted Attacks

apple, iOS, macOS, Vulnerabilities, Zero-Day /

Apple Patches Zero-Day Exploited in Targeted Attacks 2025-08-21 at 13:21 By Ionut Arghire Apple has rolled out iOS and macOS updates that resolve a zero-day vulnerability exploited in highly targeted attacks. The post Apple Patches Zero-Day Exploited in Targeted Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Apple Patches Zero-Day Exploited in Targeted Attacks Read More »

Elastic Refutes Claims of Zero-Day in EDR Product

controversy, EDR, Elastic, RCE, Vulnerabilities, Zero-Day /

Elastic Refutes Claims of Zero-Day in EDR Product 2025-08-20 at 17:08 By Ionut Arghire Elastic has found no evidence of a vulnerability leading to RCE after details and PoC of a Defend EDR bypass were published online. The post Elastic Refutes Claims of Zero-Day in EDR Product appeared first on SecurityWeek. This article is an […]

Elastic Refutes Claims of Zero-Day in EDR Product Read More »

High-Severity Vulnerabilities Patched in Chrome, Firefox

Chrome, Firefox, patch, Vulnerabilities, vulnerability /

High-Severity Vulnerabilities Patched in Chrome, Firefox 2025-08-20 at 11:19 By Ionut Arghire Google and Mozilla have released patches for multiple high-severity vulnerabilities affecting Chrome and Firefox. The post High-Severity Vulnerabilities Patched in Chrome, Firefox appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

High-Severity Vulnerabilities Patched in Chrome, Firefox Read More »

Intel Employee Data Exposed by Vulnerabilities

Data leak, Intel, Vulnerabilities /

Intel Employee Data Exposed by Vulnerabilities 2025-08-20 at 10:18 By Eduard Kovacs A researcher said he found vulnerable internal services that exposed the information of 270,000 Intel employees.  The post Intel Employee Data Exposed by Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Intel Employee Data Exposed by Vulnerabilities Read More »

New Exploit Poses Threat to SAP NetWeaver Instances

exploit, exploited, SAP, Vulnerabilities /

New Exploit Poses Threat to SAP NetWeaver Instances 2025-08-19 at 15:59 By Ionut Arghire A new public exploit chains two critical flaws in SAP NetWeaver, exposing unpatched instances to code execution attacks. The post New Exploit Poses Threat to SAP NetWeaver Instances appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

New Exploit Poses Threat to SAP NetWeaver Instances Read More »

Hundreds of N-able N-central Instances Affected by Exploited Vulnerabilities

exploited, N-able, Vulnerabilities, Zero-Day /

Hundreds of N-able N-central Instances Affected by Exploited Vulnerabilities 2025-08-18 at 15:25 By Ionut Arghire More than 870 N-able N-central instances have not been patched against CVE-2025-8875 and CVE-2025-8876, two exploited vulnerabilities. The post Hundreds of N-able N-central Instances Affected by Exploited Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]

Hundreds of N-able N-central Instances Affected by Exploited Vulnerabilities Read More »

Watch Now: CodeSecCon – Where Software Security’s Next Chapter Unfolds (Virtual Event)

Application Security, Featured, Vulnerabilities, vulnerability /

Watch Now: CodeSecCon – Where Software Security’s Next Chapter Unfolds (Virtual Event) 2025-08-16 at 16:58 By SecurityWeek News CodeSecCon is the premier virtual event bringing together developers and cybersecurity professionals to revolutionize the way applications are built, secured, and maintained. The post Watch Now: CodeSecCon – Where Software Security’s Next Chapter Unfolds (Virtual Event) appeared […]

Watch Now: CodeSecCon – Where Software Security’s Next Chapter Unfolds (Virtual Event) Read More »

Cisco Patches Critical Vulnerability in Firewall Management Platform

Cisco, patch, Vulnerabilities, vulnerability /

Cisco Patches Critical Vulnerability in Firewall Management Platform 2025-08-15 at 10:48 By Eduard Kovacs Cisco has released over 20 advisories as part of its August 2025 bundled publication for ASA, FMC and FTD products. The post Cisco Patches Critical Vulnerability in Firewall Management Platform appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]

Cisco Patches Critical Vulnerability in Firewall Management Platform Read More »

Vulnerabilities in Xerox Print Orchestration Product Allow Remote Code Execution

remote code execution, Vulnerabilities, vulnerability, Xerox /

Vulnerabilities in Xerox Print Orchestration Product Allow Remote Code Execution 2025-08-14 at 17:04 By Eduard Kovacs Path traversal and XXE injection flaws allowing unauthenticated remote code execution have been patched in Xerox FreeFlow Core.  The post Vulnerabilities in Xerox Print Orchestration Product Allow Remote Code Execution appeared first on SecurityWeek. This article is an excerpt […]

Vulnerabilities in Xerox Print Orchestration Product Allow Remote Code Execution Read More »

CISA Warns of Attacks Exploiting N-able Vulnerabilities

CISA KEV, exploited, N-able, Vulnerabilities /

CISA Warns of Attacks Exploiting N-able Vulnerabilities 2025-08-14 at 15:32 By Eduard Kovacs CISA reported becoming aware of attacks exploiting CVE-2025-8875 and CVE-2025-8876 in N-able N-central on the day they were patched. The post CISA Warns of Attacks Exploiting N-able Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

CISA Warns of Attacks Exploiting N-able Vulnerabilities Read More »

‘MadeYouReset’ HTTP2 Vulnerability Enables Massive DDoS Attacks

DDoS, DoS, HTTP2, MadeYouReset, Vulnerabilities, vulnerability /

‘MadeYouReset’ HTTP2 Vulnerability Enables Massive DDoS Attacks 2025-08-14 at 14:31 By Eduard Kovacs The new DDoS attack vector, which involves HTTP/2 implementation flaws, has been compared to Rapid Reset. The post ‘MadeYouReset’ HTTP2 Vulnerability Enables Massive DDoS Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

‘MadeYouReset’ HTTP2 Vulnerability Enables Massive DDoS Attacks Read More »

When Hackers Call: Social Engineering, Abusing Brave Support, and EncryptHub’s Expanding Arsenal

Emerging Threats, Security Research, threat hunting, Vulnerabilities /

When Hackers Call: Social Engineering, Abusing Brave Support, and EncryptHub’s Expanding Arsenal 2025-08-13 at 21:40 By Nathaniel Morales and Nikita Kazymirskyi Trustwave SpiderLabs researchers have recently identified an EncryptHub campaign that combines social engineering with abuse of the Brave Support platform to deliver malicious payloads via the CVE-2025-26633 vulnerability. In this blog post, we will […]

When Hackers Call: Social Engineering, Abusing Brave Support, and EncryptHub’s Expanding Arsenal Read More »

Chipmaker Patch Tuesday: Many Vulnerabilities Addressed by Intel, AMD, Nvidia

Chipmaker Patch Tuesday, CPU, Featured, patch, Patch Tuesday, Vulnerabilities, vulnerability /

Chipmaker Patch Tuesday: Many Vulnerabilities Addressed by Intel, AMD, Nvidia 2025-08-13 at 15:35 By Eduard Kovacs Intel, AMD and Nvidia have published security advisories describing vulnerabilities found recently in their products. The post Chipmaker Patch Tuesday: Many Vulnerabilities Addressed by Intel, AMD, Nvidia appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]

Chipmaker Patch Tuesday: Many Vulnerabilities Addressed by Intel, AMD, Nvidia Read More »

Scroll to Top