vulnerability

Unpatched Wazuh servers targeted by Mirai botnets (CVE-2025-24016)

June 10, 2025

Two Mirai botnets are exploiting a critical remote code execution vulnerability (CVE-2025-24016) in the open-source Wazuh XDR/SIEM platform, Akamai researchers have warned. …

Roundcube RCE: Dark web activity signals imminent attacks (CVE-2025-49113)

June 9, 2025

With an exploit for a critical Roundcube vulnerability (CVE-2025-49113) being offered for sale on underground forums and a PoC exploit having been made public, attacks …

Attackers hit MSP, use its RMM software to deliver ransomware to clients

May 28, 2025

A threat actor wielding the DragonForce ransomware has compromised an unnamed managed service provider (MSP) and pushed the malware onto its client organizations via …

Vulnerabilities found in NASA’s open source software

May 27, 2025

Vulnerabilities in open source software developed and used in-house by NASA could be exploited to breach their systems, claims Leon Juranić, security researcher and founder of …

Unpatched Windows Server vulnerability allows full domain compromise

May 22, 2025

A privilege escalation vulnerability in Windows Server 2025 can be used by attackers to compromise any user in Active Directory (AD), including Domain Admins. “The …

Flawed WordPress theme may allow admin account takeover on 22,000+ sites (CVE-2025-4322)

May 21, 2025

A critical vulnerability (CVE-2025-4322) in Motors, a WordPress theme popular with car/motor dealerships and rental services, can be easily exploited by unauthenticated …

CISA: Recently fixed Chrome vulnerability exploited in the wild (CVE-2025-4664)

May 16, 2025

A high-severity Chrome vulnerability (CVE-2025-4664) that Google has fixed on Wednesday is being leveraged by attackers, CISA has confirmed by adding the flaw to its Known …

Samsung patches MagicINFO 9 Server vulnerability exploited by attackers

May 15, 2025

Companies running Samsung MagicINFO, a platform for managing content on Samsung commercial digital displays, should upgrade to the latest available version of its v9 branch to …

Ivanti EPMM vulnerabilities exploited in the wild (CVE-2025-4427, CVE-2025-4428)

May 13, 2025

Attackers have exploited vulnerabilities in open-source libraries to compromise on-prem Ivanti Endpoint Manager Mobile (EPMM) instances of a “very limited” number …

Yet another SonicWall SMA100 vulnerability exploited in the wild (CVE-2025-32819)

May 8, 2025

SonicWall has fixed multiple vulnerabilities affecting its SMA100 Series devices, one of which (CVE-2025-32819) appears to be a patch bypass for an arbitrary file delete …

PoC exploit for SysAid pre-auth RCE released, upgrade quickly!

May 7, 2025

WatchTowr researchers have released a proof-of-concept (PoC) exploit that chains two vulnerabilities in SysAid On-Prem – the self-hosted version of the platform behind …

Actively exploited FreeType flaw fixed in Android (CVE-2025-27363)