Vulnerabilities

The Attack Vector: Database Triggers as Persistence Mechanisms

Database Protection, Security Research, Vulnerabilities /

The Attack Vector: Database Triggers as Persistence Mechanisms 2025-06-24 at 16:15 By Organizations often assume that restoring a backup to a patched environment eliminates threats. However, backups encapsulate both data and schema objects, including triggers. A compromised backup, often taken after an initial breach, may contain hidden triggers that reactivate the attacker’s access upon restore. […]

The Attack Vector: Database Triggers as Persistence Mechanisms Read More »

Critical Authentication Bypass Flaw Patched in Teleport

Authentication Bypass, Teleport, Vulnerabilities, vulnerability /

Critical Authentication Bypass Flaw Patched in Teleport 2025-06-23 at 14:50 By Ionut Arghire A critical-severity vulnerability in Teleport could allow remote attackers to bypass SSH authentication and access managed systems. The post Critical Authentication Bypass Flaw Patched in Teleport appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Critical Authentication Bypass Flaw Patched in Teleport Read More »

Exposed and Exploited: Trustwave Uncovers the Alarming Cyber Risks Lurking in the Tech Sector

Emerging Threats, News, Reports, Threat Intelligence, Vulnerabilities /

Exposed and Exploited: Trustwave Uncovers the Alarming Cyber Risks Lurking in the Tech Sector 2025-06-20 at 16:02 By Uncover the top cyber threats targeting the technology industry in 2025. Gain exclusive insights from Trustwave SpiderLabs into emerging ransomware trends, attacker tactics, and dark web-fueled supply chain threats. Explore how AI is both a threat and […]

Exposed and Exploited: Trustwave Uncovers the Alarming Cyber Risks Lurking in the Tech Sector Read More »

Motors Theme Vulnerability Exploited to Hack WordPress Websites

exploited, Vulnerabilities, vulnerability, WordPress /

Motors Theme Vulnerability Exploited to Hack WordPress Websites 2025-06-20 at 14:22 By Ionut Arghire Threat actors are exploiting a critical-severity vulnerability in Motors theme for WordPress to change arbitrary user passwords. The post Motors Theme Vulnerability Exploited to Hack WordPress Websites appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Motors Theme Vulnerability Exploited to Hack WordPress Websites Read More »

FreeType Zero-Day Found by Meta Exploited in Paragon Spyware Attacks

exploited, Featured, FreeType, Paragon, spyware, Vulnerabilities, WhatsApp, Zero-Day /

FreeType Zero-Day Found by Meta Exploited in Paragon Spyware Attacks 2025-06-20 at 13:25 By Eduard Kovacs WhatsApp told SecurityWeek that it linked the exploited FreeType vulnerability CVE-2025-27363 to a Paragon exploit. The post FreeType Zero-Day Found by Meta Exploited in Paragon Spyware Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]

FreeType Zero-Day Found by Meta Exploited in Paragon Spyware Attacks Read More »

High-Severity Vulnerabilities Patched by Cisco, Atlassian

Atlassian, Cisco, patch, Vulnerabilities, vulnerability /

High-Severity Vulnerabilities Patched by Cisco, Atlassian 2025-06-19 at 11:47 By Ionut Arghire Cisco has resolved a high-severity vulnerability in Meraki MX and Meraki Z devices. Atlassian pushed patches for multiple third-party dependencies. The post High-Severity Vulnerabilities Patched by Cisco, Atlassian appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

High-Severity Vulnerabilities Patched by Cisco, Atlassian Read More »

The Digital Front Line: Israel and Iran Turn the Internet into a Covert Combat Zone

Emerging Threats, News, Perspectives, Reports, Security Research, Vulnerabilities /

The Digital Front Line: Israel and Iran Turn the Internet into a Covert Combat Zone 2025-06-18 at 22:47 By The Israel-Iran conflict is barely a week old, but the security repercussions for the two combatants and the wider global community can already be seen as the cyberwarfare portion of the conflict is already spilling over […]

The Digital Front Line: Israel and Iran Turn the Internet into a Covert Combat Zone Read More »

Gerrit Misconfiguration Exposed Google Projects to Malicious Code Injection

GerriScary, Gerrit, Google, supply chain, Vulnerabilities, vulnerability /

Gerrit Misconfiguration Exposed Google Projects to Malicious Code Injection 2025-06-18 at 20:11 By Ionut Arghire Misconfigured permissions in Google’s Gerrit code collaboration platform could have led to the compromise of ChromiumOS and other Google projects. The post Gerrit Misconfiguration Exposed Google Projects to Malicious Code Injection appeared first on SecurityWeek. This article is an excerpt […]

Gerrit Misconfiguration Exposed Google Projects to Malicious Code Injection Read More »

Critical Vulnerability Patched in Citrix NetScaler

Citrix, patch, Vulnerabilities, vulnerability /

Critical Vulnerability Patched in Citrix NetScaler 2025-06-18 at 16:20 By Ionut Arghire Citrix has released patches for critical- and high-severity vulnerabilities in NetScaler and Secure Access Client and Workspace for Windows. The post Critical Vulnerability Patched in Citrix NetScaler appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Critical Vulnerability Patched in Citrix NetScaler Read More »

Linux Security: New Flaws Allow Root Access, CISA Warns of Old Bug Exploitation

CISA KEV, exploited, kernel, Linux, Vulnerabilities, vulnerability /

Linux Security: New Flaws Allow Root Access, CISA Warns of Old Bug Exploitation 2025-06-18 at 15:33 By Eduard Kovacs Qualys has disclosed two Linux vulnerabilities that can be chained for full root access, and CISA added a flaw to its KEV catalog. The post Linux Security: New Flaws Allow Root Access, CISA Warns of Old […]

Linux Security: New Flaws Allow Root Access, CISA Warns of Old Bug Exploitation Read More »

Chrome 137 Update Patches High-Severity Vulnerabilities

Chrome, exploited, Russia, Vulnerabilities, vulnerability /

Chrome 137 Update Patches High-Severity Vulnerabilities 2025-06-18 at 12:52 By Ionut Arghire Google has released a Chrome 137 update to resolve two memory bugs in the browser’s V8 and Profiler components. The post Chrome 137 Update Patches High-Severity Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Chrome 137 Update Patches High-Severity Vulnerabilities Read More »

Code Execution Vulnerabilities Patched in Veeam, BeyondTrust Products

BeyondTrust, Veeam, Vulnerabilities, vulnerability /

Code Execution Vulnerabilities Patched in Veeam, BeyondTrust Products 2025-06-18 at 11:45 By Ionut Arghire Veeam and BeyondTrust have resolved several vulnerabilities that could be exploited for remote code execution. The post Code Execution Vulnerabilities Patched in Veeam, BeyondTrust Products appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Code Execution Vulnerabilities Patched in Veeam, BeyondTrust Products Read More »

Trustwave on High Alert: How the Israel-Iran Battle Could Impact Your Organization

Emerging Threats, Government, News, Vulnerabilities /

Trustwave on High Alert: How the Israel-Iran Battle Could Impact Your Organization 2025-06-17 at 19:21 By The combat operations initiated on June 12 between Israel and Iran, as with the ongoing Ukraine-Russia conflict, once again place organizations on alert for any cyber operations either directly or adjacently related to the conflict. This article is an […]

Trustwave on High Alert: How the Israel-Iran Battle Could Impact Your Organization Read More »

Zyxel Firewall Vulnerability Again in Attacker Crosshairs

exploited, firewall, Vulnerabilities, Zyxel /

Zyxel Firewall Vulnerability Again in Attacker Crosshairs 2025-06-17 at 16:33 By Ionut Arghire GreyNoise warns of a spike in exploitation attempts targeting a two-year-old vulnerability in Zyxel firewalls. The post Zyxel Firewall Vulnerability Again in Attacker Crosshairs appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Zyxel Firewall Vulnerability Again in Attacker Crosshairs Read More »

Organizations Warned of Vulnerability Exploited Against Discontinued TP-Link Routers

CISA KEV, exploited, router, TP-LINK, Vulnerabilities, vulnerability /

Organizations Warned of Vulnerability Exploited Against Discontinued TP-Link Routers 2025-06-17 at 14:01 By Ionut Arghire CISA warns that a vulnerability impacting multiple discontinued TP-Link router models is exploited in the wild. The post Organizations Warned of Vulnerability Exploited Against Discontinued TP-Link Routers appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

Organizations Warned of Vulnerability Exploited Against Discontinued TP-Link Routers Read More »

Asus Armoury Crate Vulnerability Leads to Full System Compromise

Armoury Crate, Asus, Vulnerabilities, vulnerability /

Asus Armoury Crate Vulnerability Leads to Full System Compromise 2025-06-17 at 12:49 By Ionut Arghire A high-severity authorization bypass vulnerability in Asus Armoury Crate provides attackers with low-level system privileges. The post Asus Armoury Crate Vulnerability Leads to Full System Compromise appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Asus Armoury Crate Vulnerability Leads to Full System Compromise Read More »

Critical Vulnerability Exposes Many Mitel MiCollab Instances to Remote Hacking

Featured, MiCollab, Mitel, Vulnerabilities, vulnerability /

Critical Vulnerability Exposes Many Mitel MiCollab Instances to Remote Hacking 2025-06-13 at 11:33 By Eduard Kovacs Mitel has announced patches for a MiCollab path traversal vulnerability that can be exploited remotely without authentication. The post Critical Vulnerability Exposes Many Mitel MiCollab Instances to Remote Hacking appeared first on SecurityWeek. This article is an excerpt from […]

Critical Vulnerability Exposes Many Mitel MiCollab Instances to Remote Hacking Read More »

Critical Vulnerabilities Patched in Trend Micro Apex Central, Endpoint Encryption PolicyServer

remote code execution, security product, security product vulnerability, Trend Micro, Vulnerabilities /

Critical Vulnerabilities Patched in Trend Micro Apex Central, Endpoint Encryption PolicyServer 2025-06-13 at 11:03 By Ionut Arghire Trend Micro patches critical-severity Apex Central and Endpoint Encryption PolicyServer flaws leading to remote code execution. The post Critical Vulnerabilities Patched in Trend Micro Apex Central, Endpoint Encryption PolicyServer appeared first on SecurityWeek. This article is an excerpt […]

Critical Vulnerabilities Patched in Trend Micro Apex Central, Endpoint Encryption PolicyServer Read More »

Palo Alto Networks Patches Privilege Escalation Vulnerabilities

Palo Alto Networks, patch, Vulnerabilities, vulnerability /

Palo Alto Networks Patches Privilege Escalation Vulnerabilities 2025-06-12 at 11:35 By Ionut Arghire Palo Alto Networks has released patches for seven vulnerabilities and incorporated the latest Chrome fixes in its products. The post Palo Alto Networks Patches Privilege Escalation Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Palo Alto Networks Patches Privilege Escalation Vulnerabilities Read More »

Webinar Today: Rethinking Endpoint Hardening for Today’s Attack Landscape

Risk Management, Vulnerabilities, Webinar /

Webinar Today: Rethinking Endpoint Hardening for Today’s Attack Landscape 2025-06-11 at 16:47 By SecurityWeek News Learn how attackers hide in plain sight—and what you can do to stop them without slowing down your business. The post Webinar Today: Rethinking Endpoint Hardening for Today’s Attack Landscape appeared first on SecurityWeek. This article is an excerpt from […]

Webinar Today: Rethinking Endpoint Hardening for Today’s Attack Landscape Read More »

Scroll to Top