Microsoft Silently Fixes 8-Year Windows Security Flaw
We waited long enough. Image: Unsplash Microsoft quietly patched a critical Windows vulnerability that hackers have been exploiting for nearly...
patched
Attackers deliver ShadowPad via newly patched WSUS RCE bug
Attackers deliver ShadowPad via newly patched WSUS RCE bug Pierluigi Paganini November 24, 2025 Attackers exploited a patched WSUS flaw...
ShadowPad Malware Actively Exploits WSUS Vulnerability for Full System Access
Nov 24, 2025Ravie LakshmananMalware / Vulnerability A recently patched security flaw in Microsoft Windows Server Update Services (WSUS) has been...
New FortiWeb zero-day CVE-2025-58034 under attack patched by Fortinet
New FortiWeb zero-day CVE-2025-58034 under attack patched by Fortinet Pierluigi Paganini November 19, 2025 Fortinet patched a new FortiWeb zero-day,...
Microsoft’s November 2025 Patch Tuesday Addresses 63 CVEs (CVE-2025-62215)
5Critical 58Important 0Moderate 0Low Microsoft addresses 63 CVEs including one zero-day vulnerability which was exploited in the wild. Microsoft...
China-linked hackers exploit patched ToolShell flaw to breach Middle East telecom
China-linked hackers exploit patched ToolShell flaw to breach Middle East telecom Pierluigi Paganini October 24, 2025 China-based threat actors exploited...
Researchers Uncover WatchGuard VPN Bug That Could Let Attackers Take Over Devices
Oct 17, 2025Ravie LakshmananVulnerability / VPN Security Cybersecurity researchers have disclosed details of a recently patched critical security flaw in...
Juniper patched nine critical flaws in Junos Space
Juniper patched nine critical flaws in Junos Space Pierluigi Paganini October 10, 2025 Juniper fixed nearly 220 flaws in Junos...
Urgent: China-Linked Hackers Exploit New VMware Zero-Day Since October 2024
Sep 30, 2025Ravie LakshmananZero-Day / Vulnerability A newly patched security flaw impacting Broadcom VMware Tools and VMware Aria Operations has...
CVE-2025-10585 is the sixth actively exploited Chrome zero-day patched by Google in 2025
CVE-2025-10585 is the sixth actively exploited Chrome zero-day patched by Google in 2025 Pierluigi Paganini September 18, 2025 Google addressed...
Apple Backports Fix for CVE-2025-43300 Exploited in Sophisticated Spyware Attack
Sep 16, 2025Ravie LakshmananVulnerability / Spyware Apple on Monday backported fixes for a recently patched security flaw that has been...
Fortinet Patches CVE-2025-32756 Zero-Day RCE Flaw Exploited in FortiVoice Systems
Fortinet has patched a critical security flaw that it said has been exploited as a zero-day in attacks targeting FortiVoice...
Play Ransomware Exploited Windows CVE-2025-29824 as Zero-Day to Breach U.S. Organization
Threat actors with links to the Play ransomware family exploited a recently patched security flaw in Microsoft Windows as a...
Russian Cybercrime Syndicates Exploiting Vulnerability in 7-Zip to Circumvent Windows Mark-of-the-Web Defenses
Exploitation of a recently fixed security weakness in the 7-Zip compression tool has been observed in the wild to distribute...
Russian Cybercriminals Capitalize on Fresh NTLM Bug to Install RAT Malware through Phishing Emails
An updated security vulnerability affecting Windows NT LAN Manager (NTLM) was utilized as a zero-day exploit by an alleged Russian-affiliated...
