vulnerability - Security Ticks

Cisco Patches Another Critical ISE Vulnerability

Cisco, patch, Vulnerabilities, vulnerability / SecurityTicks

Cisco Patches Another Critical ISE Vulnerability 2025-07-17 at 12:32 By Ionut Arghire Cisco has released patches for multiple vulnerabilities, including a critical flaw in Cisco ISE that leads to remote code execution (RCE). The post Cisco Patches Another Critical ISE Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source […]

React to this headline:

Cisco Patches Another Critical ISE Vulnerability Read More »

VMware Flaws That Earned Hackers $340,000 at Pwn2Own Patched

patch, Pwn2Own, VMWare, Vulnerabilities, vulnerability / SecurityTicks

VMware Flaws That Earned Hackers $340,000 at Pwn2Own Patched 2025-07-17 at 12:32 By Eduard Kovacs Four CVEs disclosed at the Pwn2Own Berlin 2025 hacking competition have been patched in VMware products. The post VMware Flaws That Earned Hackers $340,000 at Pwn2Own Patched appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original

React to this headline:

VMware Flaws That Earned Hackers $340,000 at Pwn2Own Patched Read More »

Oracle Patches 200 Vulnerabilities With July 2025 CPU

Oracle, patch, Vulnerabilities, vulnerability / SecurityTicks

Oracle Patches 200 Vulnerabilities With July 2025 CPU 2025-07-17 at 10:37 By Ionut Arghire Oracle’s July 2025 Critical Patch Update contains 309 security patches that address approximately 200 unique CVEs. The post Oracle Patches 200 Vulnerabilities With July 2025 CPU appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source React

React to this headline:

Oracle Patches 200 Vulnerabilities With July 2025 CPU Read More »

SonicWall SMA devices persistently infected with stealthy OVERSTEP backdoor and rootkit

backdoor, credentials, Don't miss, Google, Hot stuff, Mandiant, News, SonicWall, vulnerability / SecurityTicks

SonicWall SMA devices persistently infected with stealthy OVERSTEP backdoor and rootkit 2025-07-16 at 20:54 By Zeljka Zorz Unknown intruders are targeting fully patched end-of-life SonicWall Secure Mobile Access (SMA) 100 series appliances and deploying a novel, persistent backdoor / rootkit, analysts with Google’s Threat Intelligence Group (GTIG) have warned. The analysts say UNC6148 – as

React to this headline:

SonicWall SMA devices persistently infected with stealthy OVERSTEP backdoor and rootkit Read More »

Google Says AI Agent Thwarted Exploitation of Critical Vulnerability

AI, Artificial Intelligence, Big Sleep, SQLite, Vulnerabilities, vulnerability / SecurityTicks

Google Says AI Agent Thwarted Exploitation of Critical Vulnerability 2025-07-16 at 14:47 By Eduard Kovacs Google refused to share any details on how its Big Sleep AI foiled efforts to exploit a SQLite vulnerability in the wild. The post Google Says AI Agent Thwarted Exploitation of Critical Vulnerability appeared first on SecurityWeek. This article is

React to this headline:

Google Says AI Agent Thwarted Exploitation of Critical Vulnerability Read More »

Vulnerable firmware for Gigabyte motherboards could allow bootkit installation

Binarly, bootkit, consumer, Don't miss, firmware, Gigabyte, Hot stuff, News, security update, vulnerability / SecurityTicks

Vulnerable firmware for Gigabyte motherboards could allow bootkit installation 2025-07-15 at 16:19 By Zeljka Zorz UEFI firmware running on 100+ Gigabyte motherboard models is affected by memory corruption vulnerabilities that may allow attackers to install persistent and difficult-to-detect bootkits (i.e., malware designed to infect the computer’s boot process). “While AMI (the original firmware supplier) has

React to this headline:

Vulnerable firmware for Gigabyte motherboards could allow bootkit installation Read More »

Google Gemini Tricked Into Showing Phishing Message Hidden in Email

AI jailbreak, Artificial Intelligence, Google Gemini, prompt injection, vulnerability / SecurityTicks

Google Gemini Tricked Into Showing Phishing Message Hidden in Email 2025-07-14 at 17:04 By Eduard Kovacs Google Gemini for Workspace can be tricked into displaying a phishing message when asked to summarize an email. The post Google Gemini Tricked Into Showing Phishing Message Hidden in Email appeared first on SecurityWeek. This article is an excerpt

React to this headline:

Google Gemini Tricked Into Showing Phishing Message Hidden in Email Read More »

Exploits for unauthenticated FortiWeb RCE are public, so patch quickly! (CVE-2025-25257)

Don't miss, exploit, Fortinet, Hot stuff, News, PoC, Rapid7, vulnerability, WatchTowr, web application security / SecurityTicks

Exploits for unauthenticated FortiWeb RCE are public, so patch quickly! (CVE-2025-25257) 2025-07-14 at 16:34 By Zeljka Zorz With two proof-of-concept (PoC) exploits made public late last week, CVE-2025-25257 – a critical SQL command injection vulnerability in Fortinet’s FortiWeb web application firewall – is expected to be leveraged by attackers soon. About CVE-2025-25257 CVE-2025-25257 is found

React to this headline:

Exploits for unauthenticated FortiWeb RCE are public, so patch quickly! (CVE-2025-25257) Read More »

Flaws in Gigabyte Firmware Allow Security Bypass, Backdoor Deployment

backdoor, Endpoint Security, firmware, Gigabyte, secure boot, vulnerability / SecurityTicks

Flaws in Gigabyte Firmware Allow Security Bypass, Backdoor Deployment 2025-07-14 at 14:54 By Ionut Arghire Vulnerabilities in Gigabyte firmware implementations could allow attackers to disable Secure Boot and execute code during the early boot phase. The post Flaws in Gigabyte Firmware Allow Security Bypass, Backdoor Deployment appeared first on SecurityWeek. This article is an excerpt

React to this headline:

Flaws in Gigabyte Firmware Allow Security Bypass, Backdoor Deployment Read More »

Critical Wing FTP Server vulnerability exploited in the wild (CVE-2025-47812)

Censys, Don't miss, exploit, file-sharing, Hot stuff, Huntress, MSP, News, PoC, RCE Security, SMBs, vulnerability, Wing FTP server / SecurityTicks

Critical Wing FTP Server vulnerability exploited in the wild (CVE-2025-47812) 2025-07-11 at 15:32 By Zeljka Zorz Threat actors are actively exploiting a recently fixed remote code execution vulnerability (CVE-2025-47812) in Wing FTP Server, security researchers have warned. Wing FTP Server and CVE-2025-47812 Wing FTP Server is a commercial file transfer server solution used by businesses,

React to this headline:

Critical Wing FTP Server vulnerability exploited in the wild (CVE-2025-47812) Read More »

McDonald’s Chatbot Recruitment Platform Leaked 64 Million Job Applications

data breach, Data Breaches, Data leak, McDonald's, vulnerability / SecurityTicks

McDonald’s Chatbot Recruitment Platform Leaked 64 Million Job Applications 2025-07-11 at 13:01 By Ionut Arghire Two vulnerabilities in an internal API allowed unauthorized access to contacts and chats, exposing the information of 64 million McDonald’s applicants. The post McDonald’s Chatbot Recruitment Platform Leaked 64 Million Job Applications appeared first on SecurityWeek. This article is an

React to this headline:

McDonald’s Chatbot Recruitment Platform Leaked 64 Million Job Applications Read More »

Critical Wing FTP Server Vulnerability Exploited

exploited, Vulnerabilities, vulnerability, Wing FTP server / SecurityTicks

Critical Wing FTP Server Vulnerability Exploited 2025-07-11 at 12:32 By Ionut Arghire Wing FTP Server vulnerability CVE-2025-47812 can be exploited for arbitrary command execution with root or system privileges. The post Critical Wing FTP Server Vulnerability Exploited appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source React to this headline:

React to this headline:

Critical Wing FTP Server Vulnerability Exploited Read More »

Ruckus network management solutions riddled with unpatched vulnerabilities

Carnegie Mellon University, Claroty, Don't miss, Hot stuff, networking, News, Ruckus Networks, vulnerability, vulnerability disclosure, wireless / SecurityTicks

Ruckus network management solutions riddled with unpatched vulnerabilities 2025-07-10 at 15:52 By Zeljka Zorz Claroty researcher Noam Moshe has discovered serious vulnerabilities in two Ruckus Networks (formerly Ruckus Wireless) products that may allow attackers to compromise the environments managed by the affected software, Carnegie Mellon University’s CERT Coordination Center (CERT/CC) has warned. The vulnerabilities have

React to this headline:

Ruckus network management solutions riddled with unpatched vulnerabilities Read More »

Unpatched Ruckus Vulnerabilities Allow Wireless Environment Hacking

Mobile & Wireless, Ruckus, unpatched, vulnerability, wireless / SecurityTicks

Unpatched Ruckus Vulnerabilities Allow Wireless Environment Hacking 2025-07-09 at 13:18 By Ionut Arghire Multiple vulnerabilities in Ruckus Wireless management products could be exploited to fully compromise the managed environments. The post Unpatched Ruckus Vulnerabilities Allow Wireless Environment Hacking appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source React to this

React to this headline:

Unpatched Ruckus Vulnerabilities Allow Wireless Environment Hacking Read More »

Exploits, Technical Details Released for CitrixBleed2 Vulnerability

CitrixBleed2, CVE-2025-5777, Featured, Network Security, Vulnerabilities, vulnerability / SecurityTicks

Exploits, Technical Details Released for CitrixBleed2 Vulnerability 2025-07-08 at 15:17 By Ionut Arghire Researchers released technical information and exploit code targeting a critical vulnerability (CVE-2025-5777) in Citrix NetScaler. The post Exploits, Technical Details Released for CitrixBleed2 Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source React to this headline:

React to this headline:

Exploits, Technical Details Released for CitrixBleed2 Vulnerability Read More »

Cisco fixes maximum-severity flaw in enterprise unified comms platform (CVE-2025-20309)

Cisco, communication, Don't miss, enterprise, Hot stuff, News, SMBs, vulnerability / SecurityTicks

Cisco fixes maximum-severity flaw in enterprise unified comms platform (CVE-2025-20309) 2025-07-03 at 14:19 By Zeljka Zorz Cisco has found a backdoor account in yet another of its software solutions: CVE-2025-20309, stemming from default credentials for the root account, could allow unauthenticated remote attackers to log into a vulnerable Cisco Unified Communications Manager (Unified CM) and

React to this headline:

Cisco fixes maximum-severity flaw in enterprise unified comms platform (CVE-2025-20309) Read More »

Forminator WordPress Plugin Vulnerability Exposes 400,000 Websites to Takeover

Vulnerabilities, vulnerability, WordPress, WordPress plugin / SecurityTicks

Forminator WordPress Plugin Vulnerability Exposes 400,000 Websites to Takeover 2025-07-02 at 13:18 By Ionut Arghire A vulnerability in the Forminator WordPress plugin allows attackers to delete arbitrary files and take over impacted websites. The post Forminator WordPress Plugin Vulnerability Exposes 400,000 Websites to Takeover appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

Forminator WordPress Plugin Vulnerability Exposes 400,000 Websites to Takeover Read More »

Sudo local privilege escalation vulnerabilities fixed (CVE-2025-32462, CVE-2025-32463)

Debian, Don't miss, Hot stuff, Linux, macOS, News, Stratascale, SUSE, Ubuntu, vulnerability / SecurityTicks

Sudo local privilege escalation vulnerabilities fixed (CVE-2025-32462, CVE-2025-32463) 2025-07-01 at 16:11 By Zeljka Zorz If you haven’t recently updated the Sudo utility on your Linux box(es), you should do so now, to patch two local privilege escalation vulnerabilities (CVE-2025-32462, CVE-2025-32463) that have been disclosed on Monday. What is Sudo? Sudo is command-line utility in Unix-like

React to this headline:

Sudo local privilege escalation vulnerabilities fixed (CVE-2025-32462, CVE-2025-32463) Read More »

Critical Microsens Product Flaws Allow Hackers to Go ‘From Zero to Hero’

ICS, ICS/OT, vulnerability / SecurityTicks

Critical Microsens Product Flaws Allow Hackers to Go ‘From Zero to Hero’ 2025-07-01 at 15:24 By Eduard Kovacs CISA has informed organizations about critical authentication bypass and remote code execution vulnerabilities in Microsens NMP Web+. The post Critical Microsens Product Flaws Allow Hackers to Go ‘From Zero to Hero’ appeared first on SecurityWeek. This article

React to this headline:

Critical Microsens Product Flaws Allow Hackers to Go ‘From Zero to Hero’ Read More »

CitrixBleed 2 might be actively exploited (CVE-2025-5777)

Censys, Citrix, Don't miss, enterprise, Hot stuff, NetScaler, News, ReliaQuest, vulnerability / SecurityTicks

CitrixBleed 2 might be actively exploited (CVE-2025-5777) 2025-06-30 at 15:47 By Zeljka Zorz While Citrix has observed some instances where CVE-2025-6543 has been exploited on vulnerable NetScaler networking appliances, the company still says that they don’t have evidence of exploitation for CVE-2025-5349 or CVE-2025-5777, both of which have been patched earlier this month. CVE-2025-5777, in

React to this headline:

CitrixBleed 2 might be actively exploited (CVE-2025-5777) Read More »