Latest News

Recent Vulnerability Related Headlines

Prev Next

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 73 (securityaffairs.com)

30 Nov 2025

Security Affairs newsletter Round 552 by Pierluigi Paganini – INTERNATIONAL EDITION (securityaffairs.com)

30 Nov 2025

CISA Adds Actively Exploited XSS Bug CVE-2021-26829 in OpenPLC ScadaBR to KEV (thehackernews.com)

30 Nov 2025

CISA Warns of OpenPLC ScadaBR cross-site scripting vulnerability Exploited in Attacks (cybersecuritynews.com)

29 Nov 2025

Hackers Registered 18,000 Holiday-Themed Domains Targeting ‘Christmas,’ ‘Black Friday,’ and ‘Flash Sale’ (cybersecuritynews.com)

28 Nov 2025

Inside Morte Loader: How Loader as a Service Builds Modern Botnets (socradar.io)

28 Nov 2025

New Mirai variant ShadowV2 tests IoT exploits amid AWS disruption (securityaffairs.com)

28 Nov 2025

Breaking the BeeStation: Inside Our Pwn2Own 2025 Exploit Journey (www.synacktiv.com)

27 Nov 2025

NVIDIA DGX Spark Vulnerabilities Let Attackers Execute Malicious Code and DoS Attacks (cybersecuritynews.com)

27 Nov 2025

Gitlab Patches Multiple Vulnerabilities that Enable Authentication Bypass and DoS Attacks (cybersecuritynews.com)

27 Nov 2025

Hackers Actively Exploiting IoT Vulnerabilities to Deploy New ShadowV2 Malware (cybersecuritynews.com)

27 Nov 2025

Angular HTTP Client Vulnerability Exposes XSRF Token to an Attacker-Controlled Domain (cybersecuritynews.com)

27 Nov 2025

New ASUS firmware patches critical AiCloud vulnerability (securityaffairs.com)

27 Nov 2025

New Unauthenticated DoS Vulnerability Crashes Next.js Servers with a Single Request (cybersecuritynews.com)

26 Nov 2025

Water Gamayun APT Hackers Exploit MSC EvilTwin Vulnerability to Inject Malicious Code (cybersecuritynews.com)

26 Nov 2025

Firefox browser vulnerability risks arbitrary code execution (www.scworld.com)

26 Nov 2025

Hackers Exploit NTLM Authentication Flaws to Target Windows Systems (cybersecuritynews.com)

26 Nov 2025

Old tech, new vulnerabilities: NTLM abuse, ongoing exploitation in 2025 (securelist.com)

26 Nov 2025

ASUS MyASUS Flaw Lets Hackers Escalate to SYSTEM-Level Access (cybersecuritynews.com)

25 Nov 2025

Apache Syncope Vulnerability Allows Attacker to Access Internal Database Content (cybersecuritynews.com)

25 Nov 2025

CVE-2025-50165: This Windows JPEG Vulnerability Proves Detection Isn’t Enough (securityboulevard.com)

25 Nov 2025

Zscaler Threat Hunting Discovers and Reconstructs a Sophisticated Water Gamayun APT Group Attack (securityboulevard.com)

25 Nov 2025

Dark Web Profile: Berserk Bear (socradar.io)

25 Nov 2025

Critical FluentBit Vulnerabilities Let Attackers to Cloud Environments Remotely (cybersecuritynews.com)

25 Nov 2025

Fluent Bit vulnerabilities could enable full cloud takeover (www.csoonline.com)

25 Nov 2025

CISA: Spyware and RATs used to target WhatsApp and Signal Users (securityaffairs.com)

25 Nov 2025

Canon Allegedly Breached by Clop Ransomware via Oracle E-Business Suite 0-Day Hack (cybersecuritynews.com)

25 Nov 2025

HashiCorp Vault Vulnerability Allow Attackers to Authenticate to Vault Without Valid Credentials (cybersecuritynews.com)

25 Nov 2025

NVIDIA’s Isaac-GROOT Robotics Platform Vulnerability Let Attackers Inject Malicious Codes (cybersecuritynews.com)

24 Nov 2025

Critical Flaw in Oracle Identity Manager Under Exploitation (www.darkreading.com)

24 Nov 2025

Maximum severity Grafana vulnerability fixed (www.scworld.com)

24 Nov 2025

PoC released for W3 Total Cache Vulnerability that Exposes 1+ Million Websites to RCE Attacks (cybersecuritynews.com)

24 Nov 2025

CISA Confirms Exploitation of Recent Oracle Identity Manager Vulnerability (www.securityweek.com)

24 Nov 2025

Conflicts between URL mapping and URL based access control., (Mon, Nov 24th) (isc.sans.edu)

24 Nov 2025

CVE-2025-61757: Oracle Identity Manager Auth Bypass Flaw Added to CISA’s KEV (socradar.io)

24 Nov 2025

Tenda N300 Vulnerabilities Let Attacker to Execute Arbitrary Commands as Root User (cybersecuritynews.com)

24 Nov 2025

Attackers deliver ShadowPad via newly patched WSUS RCE bug (securityaffairs.com)

24 Nov 2025

Oracle OIM zero‑day: Pre‑auth RCE forces rapid patching across enterprises (www.csoonline.com)

24 Nov 2025

vLLM Vulnerability Enables Remote Code Execution Via Malicious Payloads (cybersecuritynews.com)

24 Nov 2025

ShadowPad Malware Actively Exploits WSUS Vulnerability for Full System Access (thehackernews.com)

24 Nov 2025

What happens when vulnerability scores fall apart? (www.helpnetsecurity.com)

23 Nov 2025

CISA Warns of Oracle’s Identity Manager RCE Vulnerability Actively Exploited in Attacks (cybersecuritynews.com)

23 Nov 2025

Cybersecurity News Weekly Newsletter – Fortinet, Chrome 0-Day Flaws, Cloudflare Outage and Salesforce Gainsight Breach (cybersecuritynews.com)

23 Nov 2025

Security Affairs newsletter Round 551 by Pierluigi Paganini – INTERNATIONAL EDITION (securityaffairs.com)

23 Nov 2025

Critical Vulnerability in Azure Bastion Let Attackers Bypass Authentication and Escalate privileges (cybersecuritynews.com)

23 Nov 2025

SonicWall flags SSLVPN flaw allowing firewall crashes (securityaffairs.com)

23 Nov 2025

U.S. CISA adds an Oracle Fusion Middleware flaw to its Known Exploited Vulnerabilities catalog (securityaffairs.com)

22 Nov 2025

CISA Warns of Actively Exploited Critical Oracle Identity Manager Zero-Day Vulnerability (thehackernews.com)

22 Nov 2025

Metasploit Adds Exploit Module for Recently Disclosed FortiWeb 0-Day Vulnerabilities (cybersecuritynews.com)

21 Nov 2025

CISA warns Oracle Identity Manager RCE flaw is being actively exploited (www.bleepingcomputer.com)

21 Nov 2025

Call audio termination issue in AWS Wickr desktop clients (aws.amazon.com)

21 Nov 2025

Cybersecurity Snapshot: Global Agencies Target Criminal “Bulletproof” Hosts, as CSA Unveils Agentic AI Risk Framework (securityboulevard.com)

21 Nov 2025

CVE-2025-54114 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability (msrc.microsoft.com)

21 Nov 2025

North Korean Kimsuky and Lazarus Join Forces to Exploit Zero-Day Vulnerabilities Targeting Critical Sectors Worldwide (cybersecuritynews.com)

21 Nov 2025

Grafana warns of max severity admin spoofing vulnerability (www.bleepingcomputer.com)

21 Nov 2025

Chinese Hackers Exploiting WSUS Remote Code Execution Vulnerability to Deploy ShadowPad Malware (cybersecuritynews.com)

21 Nov 2025

Grafana Patches CVSS 10.0 SCIM Flaw Enabling Impersonation and Privilege Escalation (thehackernews.com)

21 Nov 2025

CVE-2025-40601: SonicOS SSLVPN Buffer Overflow Leads to Firewall Crash Risk, Patch Available (socradar.io)

21 Nov 2025

Cl0p’s Oracle EBS Zero-Day Campaign: What We Know So Far (socradar.io)

21 Nov 2025

October 2025: Oracle Exploitation, Red Hat Incident, PhantomCaptcha, and Major Breaches (socradar.io)

21 Nov 2025

SolarWinds addressed three critical flaws in Serv-U (securityaffairs.com)

21 Nov 2025

Critical Oracle Identity Manager Flaw Possibly Exploited as Zero-Day (www.securityweek.com)

21 Nov 2025

Broadcom Allegedly Breached by Clop Ransomware via E-Business Suite 0-Day Hack (cybersecuritynews.com)

21 Nov 2025

Critical Grafana Vulnerability Let Attackers Escalate Privilege (cybersecuritynews.com)

21 Nov 2025

Critical ASUSTOR Vulnerability Let Attackers Execute Malicious Code with Elevated Privileges (cybersecuritynews.com)

21 Nov 2025

Fortinet FortiWeb Authentication Bypass and Command Injection Vulnerability (CVE-2025-64446/CVE-2025-58034) Notice (securityboulevard.com)

21 Nov 2025

SonicOS SSLVPN Vulnerability Let Attackers Crash the Firewall Remotely (cybersecuritynews.com)

20 Nov 2025

Oracle Allegedly Breached by Clop Ransomware via E-Business Suite 0-Day Hack (cybersecuritynews.com)

20 Nov 2025

RBAC Privilege Escalation via Opto22 Groov View API (github.com)

20 Nov 2025

Remote Code Execution via Opto22 Groov Manage REST API (github.com)

20 Nov 2025

CVE-2025-64657 Azure Application Gateway Elevation of Privilege Vulnerability (msrc.microsoft.com)

20 Nov 2025

CVE-2025-64660 GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability (msrc.microsoft.com)

20 Nov 2025

CVE-2025-62459 Microsoft Defender Portal Spoofing Vulnerability (msrc.microsoft.com)

20 Nov 2025

CVE-2025-62207 Azure Monitor Elevation of Privilege Vulnerability (msrc.microsoft.com)

20 Nov 2025

CVE-2025-49752 Azure Bastion Elevation of Privilege Vulnerability (msrc.microsoft.com)

20 Nov 2025

CVE-2025-59245 Microsoft SharePoint Online Elevation of Privilege Vulnerability (msrc.microsoft.com)

20 Nov 2025

CVE-2025-64655 Dynamics OmniChannel SDK Storage Containers Elevation of Privilege Vulnerability (msrc.microsoft.com)

20 Nov 2025

CVE-2025-64656 Application Gateway Elevation of Privilege Vulnerability (msrc.microsoft.com)

20 Nov 2025

Active exploitation of 7-Zip vulnerability reported (www.scworld.com)

20 Nov 2025

CVE-2025-50165: Critical Flaw in Windows Graphics Component (securityboulevard.com)

20 Nov 2025

Fortinet criticized for ‘silent’ patching after disclosing second zero-day vulnerability in same equipment (www.csoonline.com)

20 Nov 2025

Oracle Identity Manager Exploit Observation from September (CVE-2025-61757), (Thu, Nov 20th) (isc.sans.edu)

20 Nov 2025

Critical Windows Graphics Vulnerability Lets Hackers Seize Control with a Single Image (cybersecuritynews.com)

20 Nov 2025

Lessons from Oracle E-Business Suite Hack That Allegedly Compromises Nearly 30 Organizations Worldwide (cybersecuritynews.com)

20 Nov 2025

Threat Actors Allegedly Selling Microsoft Office 0-Day RCE Vulnerability on Hacking Forums (cybersecuritynews.com)

20 Nov 2025

Critical N-able N-central Vulnerabilities Allow attacker to interact with legacy APIs and read sensitive files (cybersecuritynews.com)

20 Nov 2025

Critical Twonky Server Vulnerabilities Let Attackers Bypass Authentication (cybersecuritynews.com)

20 Nov 2025

CISA Warns of Google Chrome 0-Day Vulnerability Exploited in Attacks (cybersecuritynews.com)

20 Nov 2025

China-Nexus APT Group Leverages DLL Sideloading Technique to Attack Government and Media Sectors (cybersecuritynews.com)

19 Nov 2025

Chrome V8 Zero-Day CVE-2025-13223 – Active Exploit Confirmed, Google Issues Security Fix (socradar.io)

19 Nov 2025

CVE-2025-58034: New FortiWeb Zero-Day Exploited, Enables OS Command Injection (socradar.io)

19 Nov 2025

U.S. CISA adds a Google Chromium V8 flaw to its Known Exploited Vulnerabilities catalog (securityaffairs.com)

19 Nov 2025

7-Zip RCE flaw (CVE-2025-11001) actively exploited in attacks in the wild (securityaffairs.com)

19 Nov 2025

Operation WrtHug hijacks 50,000+ ASUS routers to Bìbuild global botnet (securityaffairs.com)

19 Nov 2025

Hackers Actively Exploiting 7-Zip RCE Vulnerability in the Wild (cybersecuritynews.com)

19 Nov 2025

Hackers Actively Exploiting 7-Zip Symbolic Link–Based RCE Vulnerability (CVE-2025-11001) (thehackernews.com)

19 Nov 2025

Massive Hacking Operation WrtHug Compromises Thousands of ASUS Routers Worldwide (cybersecuritynews.com)

19 Nov 2025

U.S. CISA adds a new Fortinet FortiWeb flaw to its Known Exploited Vulnerabilities catalog (securityaffairs.com)

19 Nov 2025

7-Zip vulnerability is being actively exploited, NHS England warns (CVE-2025-11001) (www.helpnetsecurity.com)

19 Nov 2025

The nexus of risk and intelligence: How vulnerability-informed hunting uncovers what everything else misses (www.csoonline.com)

19 Nov 2025

New ShadowRay Attack Exploit Ray AI-Framework Vulnerability to Attack AI Systems (cybersecuritynews.com)

19 Nov 2025

CISA Warns of Fortinet FortiWeb OS Command Injection Vulnerability Exploited in the Wild (cybersecuritynews.com)

19 Nov 2025

Multiple Vulnerabilities in D-Link EoL/EoS Routers Allows Remote Code Execution Attacks (cybersecuritynews.com)

19 Nov 2025

Stealth-patched FortiWeb vulnerability under active exploitation (CVE-2025-58034) (www.helpnetsecurity.com)

19 Nov 2025

IT threat evolution in Q3 2025. Non-mobile statistics (securelist.com)

19 Nov 2025

Critical SolarWinds Serv-U Vulnerabilities Let Attackers Execute Malicious Code Remotely as Admin (cybersecuritynews.com)

19 Nov 2025

New FortiWeb zero-day CVE-2025-58034 under attack patched by Fortinet (securityaffairs.com)

19 Nov 2025

New FortiWeb 0-Day Command Injection Vulnerability Exploited in the Wild (cybersecuritynews.com)

18 Nov 2025

Fortinet Warns of New FortiWeb CVE-2025-58034 Vulnerability Exploited in the Wild (thehackernews.com)

18 Nov 2025

Chrome zero-day under active attack: visiting the wrong site could hijack your browser (www.malwarebytes.com)

18 Nov 2025

More work for admins as Google patches latest zero-day Chrome vulnerability (www.csoonline.com)

18 Nov 2025

Chromium: CVE-2025-13224 Type Confusion in V8 (msrc.microsoft.com)

18 Nov 2025

Chromium: CVE-2025-13223 Type Confusion in V8 (msrc.microsoft.com)

18 Nov 2025

Fortinet’s silent patch sparks alarm as a critical FortiWeb flaw is exploited in the wild (www.csoonline.com)

18 Nov 2025

Google patches yet another exploited Chrome zero-day (CVE-2025-13223) (www.helpnetsecurity.com)

18 Nov 2025

Google fixed the seventh Chrome zero-day in 2025 (securityaffairs.com)

18 Nov 2025

W3 Total Cache Command Injection Vulnerability Exposes 1 Million WordPress Sites to RCE Attacks (cybersecuritynews.com)

18 Nov 2025

CISA Warns of Critical Lynx+ Gateway Vulnerability Exposes Data in Cleartext (cybersecuritynews.com)

18 Nov 2025

Google Issues Security Fix for Actively Exploited Chrome V8 Zero-Day Vulnerability (thehackernews.com)

17 Nov 2025

IBM AIX Vulnerabilities Let Remote Attacker Execute Arbitrary Commands (cybersecuritynews.com)

17 Nov 2025

Chrome Type Confusion Zero-Day Vulnerability Actively Exploited in the Wild (cybersecuritynews.com)

17 Nov 2025

RondoDox botnet malware now hacks servers using XWiki flaw (www.bleepingcomputer.com)

17 Nov 2025

Cisco Firewall, Unified CCX, and ISE Vulnerability Summary (Nov 2025) (securityboulevard.com)

17 Nov 2025

XWiki bug actively exploited by multiple threat actors (www.scworld.com)

17 Nov 2025

Attacks involving critical Fortinet FortiWeb bug underway (www.scworld.com)

17 Nov 2025

Eurofiber Data Claims, BMW Employee Leak, and FortiWeb Exploit Surface Online (socradar.io)

17 Nov 2025

CISA Warns of Fortinet FortiWeb WAF Vulnerability Exploited in the Wild to Gain Admin Access (cybersecuritynews.com)

17 Nov 2025

Critical RCE Vulnerabilities in AI Inference Engines Exposes Meta, Nvidia and Microsoft Frameworks (cybersecuritynews.com)

17 Nov 2025

Hackers Exploiting XWiki Vulnerability in the Wild to Hire the Servers for Botnet (cybersecuritynews.com)

17 Nov 2025

RondoDox expands botnet by exploiting XWiki RCE bug left unpatched since February 2025 (securityaffairs.com)

17 Nov 2025

Microsoft Patch Tuesday, November 2025 Edition (krebsonsecurity.com)

16 Nov 2025

Security Affairs newsletter Round 550 by Pierluigi Paganini – INTERNATIONAL EDITION (securityaffairs.com)

16 Nov 2025

RondoDox Exploits Unpatched XWiki Servers to Pull More Devices Into Its Botnet (thehackernews.com)

15 Nov 2025

Cisco Catalyst Center Vulnerability Let Attackers Escalate Priveleges (cybersecuritynews.com)

15 Nov 2025

PoC Exploit Tool Released for FortiWeb WAF Vulnerability Exploited in the Wild (cybersecuritynews.com)

15 Nov 2025

Critical pgAdmin4 Vulnerability Lets Attackers Execute Remote Code on Servers (cybersecuritynews.com)

15 Nov 2025

Honeypot: FortiWeb CVE-2025-64446 Exploits, (Sat, Nov 15th) (isc.sans.edu)

15 Nov 2025

U.S. CISA adds Fortinet FortiWeb flaw to its Known Exploited Vulnerabilities catalog (securityaffairs.com)

15 Nov 2025

Akira Ransomware Targets Over 250 Organizations, Extracts $42 Million in Ransom Payments – New CISA Report (cybersecuritynews.com)

14 Nov 2025

Critical FortiWeb WAF Flaw Exploited in the Wild, Enabling Full Admin Takeover (cybersecuritynews.com)

14 Nov 2025

Critical CVE-2025-59367 flaw lets hackers access ASUS DSL routers remotely (securityaffairs.com)

14 Nov 2025

CVE-2025-64446: Fortinet FortiWeb Zero-Day Path Traversal Vulnerability Exploited in the Wild (www.tenable.com)

14 Nov 2025

Cybersecurity Snapshot: Refresh Your Akira Defenses Now, CISA Says, as OWASP Revamps Its App Sec Top 10 Risks (securityboulevard.com)

14 Nov 2025

NVIDIA NeMo Framework Vulnerabilities Allows Code Injection and Privilege Escalation (cybersecuritynews.com)

14 Nov 2025

Critical FortiWeb flaw under attack, allowing complete compromise (securityaffairs.com)

14 Nov 2025

Copy-paste vulnerability hit AI inference frameworks at Meta, Nvidia, and Microsoft (www.csoonline.com)

14 Nov 2025

Multiple vulnerabilities in Cisco Unified CCX Allow Attackers to Execute Arbitrary Commands (cybersecuritynews.com)

14 Nov 2025

Washington Post notifies 10,000 individuals affected in Oracle-linked data theft (securityaffairs.com)

14 Nov 2025

Cl0P Ransomware Group Allegedly Claims Breach of Entrust in Oracle 0-Day EBS Hack (cybersecuritynews.com)

14 Nov 2025

Critical Fortinet FortiWeb Vulnerability Exploited in the Wild to Admin Accounts (cybersecuritynews.com)

13 Nov 2025

FortiWeb Authentication Bypass Vulnerability Exploited – Script to Detect Vulnerable Appliances (cybersecuritynews.com)

13 Nov 2025

Re: [FD] : "Glass Cage" – Zero-Click iMessage → Persistent iOS Compromise + Bricking (CVE-2025-24085 / 24201, CNVD-2025-07885) (seclists.org)

13 Nov 2025

Attacks involving critical WatchGuard Firebox bug ongoing, CISA warns (www.scworld.com)

13 Nov 2025

Zero-day attacks against Cisco ISE, Citrix NetScaler observed (www.scworld.com)

13 Nov 2025

Chromium: CVE-2025-13042 Inappropriate implementation in V8 (msrc.microsoft.com)

13 Nov 2025

“Patched” but still exposed: US federal agencies must remediate Cisco flaws (again) (www.helpnetsecurity.com)

13 Nov 2025

NHS Investigating Oracle EBS Hack Following Cl0p Ransomware Group Claim (cybersecuritynews.com)

13 Nov 2025

Multiple GitLab Vulnerabilities Let Attackers Inject Malicious Prompts to Steal Sensitive Data (cybersecuritynews.com)

13 Nov 2025

Multiple Kibana Vulnerabilities Enables SSRF and XSS Attacks (cybersecuritynews.com)

13 Nov 2025

U.S. CISA adds WatchGuard Firebox, Microsoft Windows, and Gladinet Triofox flaws to its Known Exploited Vulnerabilities catalog (securityaffairs.com)

13 Nov 2025

Critical WatchGuard Firebox Vulnerability Exploited in Attacks (www.securityweek.com)

13 Nov 2025

Zero-day exploits hit Cisco ISE and Citrix systems in an advanced campaign (www.csoonline.com)

13 Nov 2025

Palo Alto PAN-OS Firewall Vulnerability Let Attackers Reboot Firewall by Sending Malicious Packet (cybersecuritynews.com)

13 Nov 2025

Cisco ISE, CitrixBleed 2 Vulnerabilities Exploited as Zero-Days: Amazon (www.securityweek.com)

13 Nov 2025

Amazon alerts: advanced threat actor exploits Cisco ISE & Citrix NetScaler zero-days (securityaffairs.com)

13 Nov 2025

Critical Dell Data Lakehouse Vulnerability Let Remote Attacker Escalate Privileges (cybersecuritynews.com)

13 Nov 2025

CISA Warns WatchGuard Firebox Out-of-Bounds Write Vulnerability Exploited Attacks (cybersecuritynews.com)

13 Nov 2025

Microsoft SQL Server Vulnerability Let Attackers Escalate Privileges (cybersecuritynews.com)

13 Nov 2025

CISA Flags Critical WatchGuard Fireware Flaw Exposing 54,000 Fireboxes to No-Login Attacks (thehackernews.com)

13 Nov 2025

CISA Warns of Federal Agencies Not Fully Patching Actively Exploited Cisco ASA or Firepower Devices (cybersecuritynews.com)

13 Nov 2025

Lite XL Text editor Vulnerability Let Attackers Execute Arbitrary Code (cybersecuritynews.com)

12 Nov 2025

'CitrixBleed 2' Wreaks Havoc as Zero-Day Bug (www.darkreading.com)

12 Nov 2025

Citrix NetScaler ADC and Gateway Vulnerability Enables Cross-Site Scripting Attacks (cybersecuritynews.com)

12 Nov 2025

CVE-2025-21042: Samsung Galaxy Zero-Day Exploited in LANDFALL Spyware Campaign (socradar.io)

12 Nov 2025

November 2025 Patch Tuesday: Microsoft Fixes 63 Vulnerabilities, Including Windows Kernel Zero-Day (CVE-2025-62215) (socradar.io)

12 Nov 2025

Beware of Malicious Steam Cleanup Tool Attack Windows Machines to Deploy Backdoor Malware (cybersecuritynews.com)

12 Nov 2025

Multiple Apache OpenOffice Vulnerabilities Leads to Memory Corruption and Unauthorized Content Loading (cybersecuritynews.com)

12 Nov 2025

Is It CitrixBleed4? Well, No. Is It Good? Also, No. (Citrix NetScaler Memory Leak & RXSS CVE-2025-12101) (labs.watchtowr.com)

12 Nov 2025

GitHub Copilot and Visual Studio Vulnerabilities Allow Attacker to Bypass Security Feature (cybersecuritynews.com)

12 Nov 2025

Hackers Actively Exploiting Cisco and Citrix 0-Days in the Wild to Deploy Webshell (cybersecuritynews.com)

12 Nov 2025

State Sponsored Activity

This chart provides an indication of state sponsored activity suspected or known to be actively targetting vulnerabilities recently.

Government Alerts & Advisories

Prev Next

CISA Adds One Known Exploited Vulnerability to Catalog (www.cisa.gov)

28 Nov 2025

GeoServer security advisory (AV25-789) (cyber.gc.ca)

28 Nov 2025

[Control systems] ABB security advisory (AV25-788) (cyber.gc.ca)

27 Nov 2025

Splunk security advisory (AV25-787) (cyber.gc.ca)

26 Nov 2025

GitLab security advisory (AV25-786) (cyber.gc.ca)

26 Nov 2025

Zenitel TCIV-3+ (www.cisa.gov)

25 Nov 2025

Rockwell Automation Arena Simulation (www.cisa.gov)

25 Nov 2025

SiRcom SMART Alert (SiSA) (www.cisa.gov)

25 Nov 2025

Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share (www.cisa.gov)

25 Nov 2025

Opto 22 groov View (www.cisa.gov)

25 Nov 2025

Festo Compact Vision System, Control Block, Controller, and Operator Unit products (www.cisa.gov)

25 Nov 2025

HashiCorp security advisory (AV25-785) (cyber.gc.ca)

25 Nov 2025

Red Hat security advisory (AV25-783) (cyber.gc.ca)

24 Nov 2025

VMware security advisory (AV25-784) (cyber.gc.ca)

24 Nov 2025

[Control systems] CISA ICS security advisories (AV25-782) (cyber.gc.ca)

24 Nov 2025

Ubuntu security advisory (AV25-781) (cyber.gc.ca)

24 Nov 2025

Dell security advisory (AV25-779) (cyber.gc.ca)

24 Nov 2025

IBM security advisory (AV25-780) (cyber.gc.ca)

24 Nov 2025

CISA Adds One Known Exploited Vulnerability to Catalog (www.cisa.gov)

21 Nov 2025

Grafana security advisory (AV25-778) (cyber.gc.ca)

21 Nov 2025

HPE security advisory (AV25-777) (cyber.gc.ca)

21 Nov 2025

[Control systems] ABB security advisory (AV25-776) (cyber.gc.ca)

21 Nov 2025

Automated Logic WebCTRL Premium Server (www.cisa.gov)

20 Nov 2025

Festo MSE6-C2M/D2M/E2M (www.cisa.gov)

20 Nov 2025

Emerson Appleton UPSMON-PRO (www.cisa.gov)

20 Nov 2025

ICAM365 CCTV Camera Multiple Models (www.cisa.gov)

20 Nov 2025

Opto 22 GRV-EPIC and groov RIO (www.cisa.gov)

20 Nov 2025

VMware security advisory (AV25-775) (cyber.gc.ca)

20 Nov 2025

SonicWall security advisory (AV25-774) (cyber.gc.ca)

20 Nov 2025

VMware security advisory (AV25-773) (cyber.gc.ca)

19 Nov 2025

SolarWinds security advisory (AV25-772) (cyber.gc.ca)

19 Nov 2025

CISA Adds One Known Exploited Vulnerability to Catalog (www.cisa.gov)

19 Nov 2025

Microsoft Edge security advisory (AV25-771) (cyber.gc.ca)

19 Nov 2025

Atlassian security advisory (AV25-770) (cyber.gc.ca)

19 Nov 2025

Fortinet security advisory (AV25-769) (cyber.gc.ca)

18 Nov 2025

CISA Adds One Known Exploited Vulnerability to Catalog (www.cisa.gov)

18 Nov 2025

HPE security advisory (AV25-768) (cyber.gc.ca)

18 Nov 2025

Schneider Electric PowerChute Serial Shutdown (www.cisa.gov)

18 Nov 2025

Shelly Pro 4PM (www.cisa.gov)

18 Nov 2025

Schneider Electric EcoStruxure Machine SCADA Expert & Pro-face BLUE Open Studio (www.cisa.gov)

18 Nov 2025

Shelly Pro 3EM (www.cisa.gov)

18 Nov 2025

Zyxel security advisory (AV25-767) (cyber.gc.ca)

18 Nov 2025

Google Chrome security advisory (AV25-766) (cyber.gc.ca)

18 Nov 2025

Active Exploitation of Zero-Day Vulnerability in Google Chrome (www.csa.gov.sg)

18 Nov 2025

[Control systems] Siemens security advisory (AV25-765) (cyber.gc.ca)

17 Nov 2025

[Control systems] CISA ICS security advisories (AV25–764) (cyber.gc.ca)

17 Nov 2025

Dell security advisory (AV25-761) (cyber.gc.ca)

17 Nov 2025

Ubuntu security advisory (AV25-762) (cyber.gc.ca)

17 Nov 2025

Red Hat security advisory (AV25-763) (cyber.gc.ca)

17 Nov 2025

IBM security advisory (AV25-760) (cyber.gc.ca)

17 Nov 2025

Bargain hunters urged to stay alert to cyber scams ahead of holiday shopping season (www.ncsc.gov.uk)

17 Nov 2025

Critical Vulnerability in FortiWeb Web Application Firewall (www.csa.gov.sg)

16 Nov 2025

Fortinet Releases Security Advisory for Relative Path Traversal Vulnerability Affecting FortiWeb Products (www.cisa.gov)

14 Nov 2025

Cisco security advisory (AV25-759) (cyber.gc.ca)

14 Nov 2025

AL25-017 - Vulnerability impacting Fortinet FortiWeb – CVE-2025-64446 (cyber.gc.ca)

14 Nov 2025

CISA Adds One Known Exploited Vulnerability to Catalog (www.cisa.gov)

14 Nov 2025

Fortinet security advisory (AV25-758) (cyber.gc.ca)

14 Nov 2025

Samsung mobile security advisory (AV25-757) (cyber.gc.ca)

14 Nov 2025

HPE security advisory (AV25-756) (cyber.gc.ca)

14 Nov 2025

Microsoft Edge security advisory (AV25-755) (cyber.gc.ca)

14 Nov 2025

Splunk security advisory (AV25-754) (cyber.gc.ca)

14 Nov 2025

[Control systems] Rockwell Automation security advisory (AV25-753) (cyber.gc.ca)

13 Nov 2025

[Control systems] Schneider Electric security advisory (AV25-752) (cyber.gc.ca)

13 Nov 2025

Rockwell Automation AADvance-Trusted SIS Workstation (www.cisa.gov)

13 Nov 2025

Rockwell Automation Verve Asset Manager (www.cisa.gov)

13 Nov 2025

Brightpick Mission Control / Internal Logic Control (www.cisa.gov)

13 Nov 2025

Siemens Spectrum Power 4 (www.cisa.gov)

13 Nov 2025

Siemens Solid Edge (www.cisa.gov)

13 Nov 2025

General Industrial Controls Lynx+ Gateway (www.cisa.gov)

13 Nov 2025

AVEVA Application Server IDE (www.cisa.gov)

13 Nov 2025

Siemens Altair Grid Engine (www.cisa.gov)

13 Nov 2025

Mitsubishi Electric MELSEC iQ-F Series (www.cisa.gov)

13 Nov 2025

Siemens Software Center and Solid Edge (www.cisa.gov)

13 Nov 2025

AVEVA Edge (www.cisa.gov)

13 Nov 2025

Siemens COMOS (www.cisa.gov)

13 Nov 2025

Siemens SICAM P850 family and SICAM P855 family (www.cisa.gov)

13 Nov 2025

Rockwell Automation FactoryTalk DataMosaix Private Cloud (www.cisa.gov)

13 Nov 2025

Siemens LOGO! 8 BM Devices (www.cisa.gov)

13 Nov 2025

Rockwell Automation Studio 5000 Simulation Interface (www.cisa.gov)

13 Nov 2025

Rockwell Automation FactoryTalk Policy Manager (www.cisa.gov)

13 Nov 2025

GitLab security advisory (AV25-751) (cyber.gc.ca)

13 Nov 2025

Drupal security advisory (AV25-750) (cyber.gc.ca)

13 Nov 2025

MEDIUM ALERT: Scammers impersonating police to target victims for cryptocurrency/seed wallet theft (www.cyber.gov.au)

12 Nov 2025

[Control systems] Siemens security advisory (AV25-749) (cyber.gc.ca)

12 Nov 2025

Palo Alto Networks security advisory (AV25-748) (cyber.gc.ca)

12 Nov 2025

Mozilla security advisory (AV25-747) (cyber.gc.ca)

12 Nov 2025

Ivanti security advisory (AV25-746) (cyber.gc.ca)

12 Nov 2025

Update: Implementation Guidance for Emergency Directive on Cisco ASA and Firepower Device Vulnerabilities (www.cisa.gov)

12 Nov 2025

Microsoft Edge security advisory (AV25-745) (cyber.gc.ca)

12 Nov 2025

Intel security advisory (AV25-744) (cyber.gc.ca)

12 Nov 2025

CISA Alerts & KEV Catalog Updates

CISA KEVs (known exploited vulnerabilities) identified as a priroty to mitigate over the past three months.

View Catalog & Updates

Actively Exploited Vulnerabilities

Prev Next

CISA Adds Actively Exploited XSS Bug CVE-2021-26829 in OpenPLC ScadaBR to KEV (thehackernews.com)

30 Nov 2025

CISA Warns of OpenPLC ScadaBR cross-site scripting vulnerability Exploited in Attacks (cybersecuritynews.com)

29 Nov 2025

CISA Warns of Oracle’s Identity Manager RCE Vulnerability Actively Exploited in Attacks (cybersecuritynews.com)

23 Nov 2025

Week in review: Stealth-patched FortiWeb vulnerability under active exploitation, Logitech data breach (www.helpnetsecurity.com)

23 Nov 2025

U.S. CISA adds an Oracle Fusion Middleware flaw to its Known Exploited Vulnerabilities catalog (securityaffairs.com)

22 Nov 2025

CISA Warns of Actively Exploited Critical Oracle Identity Manager Zero-Day Vulnerability (thehackernews.com)

22 Nov 2025

CISA warns of actively exploited FortiWeb flaw. (thecyberwire.com)

21 Nov 2025

CISA warns Oracle Identity Manager RCE flaw is being actively exploited (www.bleepingcomputer.com)

21 Nov 2025

Critical Oracle Identity Manager Flaw Possibly Exploited as Zero-Day (www.securityweek.com)

21 Nov 2025

Active exploitation of 7-Zip vulnerability reported (www.scworld.com)

20 Nov 2025

Recent 7-Zip Vulnerability Exploited in Attacks (www.securityweek.com)

20 Nov 2025

CISA Warns of Google Chrome 0-Day Vulnerability Exploited in Attacks (cybersecuritynews.com)

20 Nov 2025

Chrome V8 Zero-Day CVE-2025-13223 – Active Exploit Confirmed, Google Issues Security Fix (socradar.io)

19 Nov 2025

CVE-2025-58034: New FortiWeb Zero-Day Exploited, Enables OS Command Injection (socradar.io)

19 Nov 2025

U.S. CISA adds a Google Chromium V8 flaw to its Known Exploited Vulnerabilities catalog (securityaffairs.com)

19 Nov 2025

7-Zip RCE flaw (CVE-2025-11001) actively exploited in attacks in the wild (securityaffairs.com)

19 Nov 2025

Hackers Actively Exploiting 7-Zip RCE Vulnerability in the Wild (cybersecuritynews.com)

19 Nov 2025

U.S. CISA adds a new Fortinet FortiWeb flaw to its Known Exploited Vulnerabilities catalog (securityaffairs.com)

19 Nov 2025

7-Zip vulnerability is being actively exploited, NHS England warns (CVE-2025-11001) (www.helpnetsecurity.com)

19 Nov 2025

Two-Year-Old Ray AI Framework Flaw Exploited in Ongoing Campaign (www.securityweek.com)

19 Nov 2025

CISA Warns of Fortinet FortiWeb OS Command Injection Vulnerability Exploited in the Wild (cybersecuritynews.com)

19 Nov 2025

Stealth-patched FortiWeb vulnerability under active exploitation (CVE-2025-58034) (www.helpnetsecurity.com)

19 Nov 2025

Fortinet Discloses Second Exploited FortiWeb Zero-Day in a Week (www.securityweek.com)

19 Nov 2025

New FortiWeb zero-day CVE-2025-58034 under attack patched by Fortinet (securityaffairs.com)

19 Nov 2025

New FortiWeb 0-Day Command Injection Vulnerability Exploited in the Wild (cybersecuritynews.com)

18 Nov 2025

Fortinet Warns of New FortiWeb CVE-2025-58034 Vulnerability Exploited in the Wild (thehackernews.com)

18 Nov 2025

Access under attack: Rethinking identity as the new cyber battleground (www.scworld.com)

18 Nov 2025

Fortinet warns of new FortiWeb zero-day exploited in attacks (www.bleepingcomputer.com)

18 Nov 2025

Google Chrome bug exploited as an 0-day - patch now or risk full system compromise (go.theregister.com)

18 Nov 2025

Eurofiber Data Breach – Hackers Exploited Vulnerability to Exfiltrate Users’ Data (cybersecuritynews.com)

18 Nov 2025

Fortinet’s silent patch sparks alarm as a critical FortiWeb flaw is exploited in the wild (www.csoonline.com)

18 Nov 2025

Google patches yet another exploited Chrome zero-day (CVE-2025-13223) (www.helpnetsecurity.com)

18 Nov 2025

Google fixes new Chrome zero-day flaw exploited in attacks (www.bleepingcomputer.com)

18 Nov 2025

Chrome 142 Update Patches Exploited Zero-Day (www.securityweek.com)

18 Nov 2025

Google Issues Security Fix for Actively Exploited Chrome V8 Zero-Day Vulnerability (thehackernews.com)

17 Nov 2025

Chrome Type Confusion Zero-Day Vulnerability Actively Exploited in the Wild (cybersecuritynews.com)

17 Nov 2025

XWiki bug actively exploited by multiple threat actors (www.scworld.com)

17 Nov 2025

Critical Fortinet FortiWeb WAF Bug Exploited in the Wild (www.darkreading.com)

17 Nov 2025

CISA Warns of Fortinet FortiWeb WAF Vulnerability Exploited in the Wild to Gain Admin Access (cybersecuritynews.com)

17 Nov 2025

⚡ Weekly Recap: Fortinet Exploited, China's AI Hacks, PhaaS Empire Falls & More (thehackernews.com)

17 Nov 2025

Hackers Exploiting XWiki Vulnerability in the Wild to Hire the Servers for Botnet (cybersecuritynews.com)

17 Nov 2025

Week in review: Windows kernel flaw patched, suspected Fortinet FortiWeb zero-day exploited (www.helpnetsecurity.com)

16 Nov 2025

PoC Exploit Tool Released for FortiWeb WAF Vulnerability Exploited in the Wild (cybersecuritynews.com)

15 Nov 2025

U.S. CISA adds Fortinet FortiWeb flaw to its Known Exploited Vulnerabilities catalog (securityaffairs.com)

15 Nov 2025

Critical FortiWeb WAF Flaw Exploited in the Wild, Enabling Full Admin Takeover (cybersecuritynews.com)

14 Nov 2025

Australian cybercrime portal exploited by scammers (www.scworld.com)

14 Nov 2025

Fortinet finally cops to critical make-me-admin bug under active exploitation (go.theregister.com)

14 Nov 2025

Fortinet Confirms Active Exploitation of Critical FortiWeb Vulnerability (www.securityweek.com)

14 Nov 2025

CVE-2025-64446: Fortinet FortiWeb Zero-Day Path Traversal Vulnerability Exploited in the Wild (www.tenable.com)

14 Nov 2025

Fortinet confirms silent patch for FortiWeb zero-day exploited in attacks (www.bleepingcomputer.com)

14 Nov 2025

Cisco ASA firewalls still under attack; CISA issues guidance for patch (www.scworld.com)

14 Nov 2025

Critical FortiWeb flaw under attack, allowing complete compromise (securityaffairs.com)

14 Nov 2025

A suspected Fortinet FortiWeb zero-day is actively exploited, researchers warn (www.helpnetsecurity.com)

14 Nov 2025

Fortinet FortiWeb Flaw Actively Exploited in the Wild Before Company's Silent Patch (thehackernews.com)

14 Nov 2025

Critical Fortinet FortiWeb Vulnerability Exploited in the Wild to Admin Accounts (cybersecuritynews.com)

13 Nov 2025

Fortinet FortiWeb flaw with public PoC exploited to create admin users (www.bleepingcomputer.com)

13 Nov 2025

FortiWeb Authentication Bypass Vulnerability Exploited – Script to Detect Vulnerable Appliances (cybersecuritynews.com)

13 Nov 2025

U.S. CISA adds WatchGuard Firebox, Microsoft Windows, and Gladinet Triofox flaws to its Known Exploited Vulnerabilities catalog (securityaffairs.com)

13 Nov 2025

Critical WatchGuard Firebox Vulnerability Exploited in Attacks (www.securityweek.com)

13 Nov 2025

CISA warns feds to fully patch actively exploited Cisco flaws (www.bleepingcomputer.com)

13 Nov 2025

CISA warns of WatchGuard firewall flaw exploited in attacks (www.bleepingcomputer.com)

13 Nov 2025

Cisco ISE, CitrixBleed 2 Vulnerabilities Exploited as Zero-Days: Amazon (www.securityweek.com)

13 Nov 2025

CISA Warns WatchGuard Firebox Out-of-Bounds Write Vulnerability Exploited Attacks (cybersecuritynews.com)

13 Nov 2025

CISA Warns of Federal Agencies Not Fully Patching Actively Exploited Cisco ASA or Firepower Devices (cybersecuritynews.com)

13 Nov 2025

Actively exploited zero-day among dozens of patched Microsoft vulnerabilities (www.scworld.com)

12 Nov 2025

Telegram bots exploited in European credential phishing campaign (www.scworld.com)

12 Nov 2025

CVE-2025-21042: Samsung Galaxy Zero-Day Exploited in LANDFALL Spyware Campaign (socradar.io)

12 Nov 2025

Amazon Uncovers Attacks Exploited Cisco ISE and Citrix NetScaler as Zero-Day Flaws (thehackernews.com)

12 Nov 2025

Hackers Actively Exploiting Cisco and Citrix 0-Days in the Wild to Deploy Webshell (cybersecuritynews.com)

12 Nov 2025

Hackers exploited Citrix, Cisco ISE flaws in zero-day attacks (www.bleepingcomputer.com)

12 Nov 2025

Patch Tuesday: Microsoft fixes actively exploited Windows kernel vulnerability (CVE-2025-62215) (www.helpnetsecurity.com)

12 Nov 2025

Microsoft Patch Tuesday security updates for November 2025 fixed an actively exploited Windows Kernel bug (securityaffairs.com)

11 Nov 2025

Windows Kernel 0‑day Vulnerability Actively Exploited in the Wild to Escalate Privilege (cybersecuritynews.com)

11 Nov 2025

Microsoft Patches Actively Exploited Windows Kernel Zero-Day (www.securityweek.com)

11 Nov 2025

CISA: Patch Samsung flaw exploited to deliver spyware (CVE-2025-21042) (www.helpnetsecurity.com)

11 Nov 2025

Critical Triofox Vulnerability Exploited in the Wild (www.securityweek.com)

11 Nov 2025

Attackers exploited another Gladinet Triofox zero-day (CVE-2025-12480) (www.helpnetsecurity.com)

11 Nov 2025

U.S. CISA adds Samsung mobile devices flaw to its Known Exploited Vulnerabilities catalog (securityaffairs.com)

11 Nov 2025

Critical Triofox bug exploited to run malicious payloads via AV configuration (securityaffairs.com)

11 Nov 2025

CISA Warns of Samsung Mobile Devices 0-Day RCE Vulnerability Exploited in Attacks (cybersecuritynews.com)

10 Nov 2025

Runc Vulnerabilities Can Be Exploited to Escape Containers (www.securityweek.com)

10 Nov 2025

QNAP Patches Vulnerabilities Exploited at Pwn2Own Ireland (www.securityweek.com)

10 Nov 2025

Monsta web-based FTP Remote Code Execution Vulnerability Exploited (cybersecuritynews.com)

10 Nov 2025

Seven QNAP Zero-Day Vulnerabilities Exploited at Pwn2Own 2025 Now Patched (cybersecuritynews.com)

08 Nov 2025

LANDFALL spyware exploited Samsung zero-day CVE-2025-21042 in Middle East attacks (securityaffairs.com)

07 Nov 2025

QNAP fixes seven NAS zero-day flaws exploited at Pwn2Own (www.bleepingcomputer.com)

07 Nov 2025

New LandFall spyware exploited Samsung zero-day via WhatsApp messages (www.bleepingcomputer.com)

07 Nov 2025

Samsung Zero-Click Flaw Exploited to Deploy LANDFALL Android Spyware via WhatsApp (thehackernews.com)

07 Nov 2025

Cisco: Actively exploited firewall flaws now abused for DoS attacks (www.bleepingcomputer.com)

07 Nov 2025

Cisco Warns of Hackers Actively Exploiting ASA and FTD 0-day RCE Vulnerability in the Wild (cybersecuritynews.com)

06 Nov 2025

Clop Ransomware Actors Exploiting the Latest 0-Day Exploits in the Wild (cybersecuritynews.com)

06 Nov 2025

CISA Warns of Gladinet CentreStack and Triofox Files Vulnerability Exploited in Attacks (cybersecuritynews.com)

05 Nov 2025

CISA warns of critical CentOS Web Panel bug exploited in attacks (www.bleepingcomputer.com)

05 Nov 2025

Windows Cloud Files Mini Filter Driver Vulnerability Exploited to Escalate Privileges (cybersecuritynews.com)

05 Nov 2025

Google warns of new AI-powered malware families deployed in the wild (www.bleepingcomputer.com)

05 Nov 2025

Critical Control Web Panel vulnerability is actively exploited (CVE-2025-48703) (www.helpnetsecurity.com)

05 Nov 2025

Exploited ‘Post SMTP’ Plugin Flaw Exposes WordPress Sites to Takeover  (www.securityweek.com)

05 Nov 2025

CISA Warns of Control Web Panel OS Command Injection Vulnerability Exploited in Attacks (cybersecuritynews.com)

05 Nov 2025

U.S. CISA adds Gladinet CentreStack, and CWP Control Web Panel flaws to its Known Exploited Vulnerabilities catalog (securityaffairs.com)

05 Nov 2025

CISA Warns of CWP Vulnerability Exploited in the Wild (www.securityweek.com)

05 Nov 2025

CISA Adds Gladinet and CWP Flaws to KEV Catalog Amid Active Exploitation Evidence (thehackernews.com)

04 Nov 2025

Week in review: WSUS vulnerability exploited to drop Skuld infostealer, PoC for BIND 9 DNS flaw published (www.helpnetsecurity.com)

02 Nov 2025

China-linked hackers exploited Lanscope flaw as a zero-day in attacks (www.bleepingcomputer.com)

01 Nov 2025

CISA Warns of Linux Kernel Use-After-Free Vulnerability Exploited in Attacks to Deploy Ransomware (cybersecuritynews.com)

31 Oct 2025

Hackers Exploiting Cisco IOS XE Vulnerability in the Wild to Deploy BADCANDY Web Shell (cybersecuritynews.com)

31 Oct 2025

XWiki and VMware flaws to CISA list of exploited vulnerabilities (www.scworld.com)

31 Oct 2025

Two Windows vulnerabilities, one a 0-day, are under active exploitation (arstechnica.com)

31 Oct 2025

CISA warns of actively exploited Linux kernel flaw. (thecyberwire.com)

31 Oct 2025

Unpatched Windows vulnerability continues to be exploited by APTs (CVE-2025-9491) (www.helpnetsecurity.com)

31 Oct 2025

CISA: High-severity Linux flaw now exploited by ransomware gangs (www.bleepingcomputer.com)

31 Oct 2025

Windows zero-day actively exploited to spy on European diplomats (www.bleepingcomputer.com)

31 Oct 2025

CISA Adds Exploited XWiki, VMware Flaws to KEV Catalog (www.securityweek.com)

31 Oct 2025

CISA Warns of XWiki Platform Injection vulnerability Exploited to Execute Remote Code (cybersecuritynews.com)

31 Oct 2025

CISA Flags VMware Zero-Day Exploited by China-Linked Hackers in Active Attacks (thehackernews.com)

31 Oct 2025

CISA Warns of VMware Tools and Aria Operations 0-Day Vulnerability Exploited in Attacks (cybersecuritynews.com)

30 Oct 2025

U.S. CISA adds XWiki Platform, and Broadcom VMware Aria Operations and VMware Tools flaws to its Known Exploited Vulnerabilities catalog…

30 Oct 2025

CISA orders feds to patch VMware Tools flaw exploited by Chinese hackers (www.bleepingcomputer.com)

30 Oct 2025

Microsoft Windows Cloud Files Minifilter Privilege Escalation Vulnerability Exploited (cybersecuritynews.com)

30 Oct 2025

CISA Shares New Threat Detections for Actively Exploited WSUS Vulnerability (cybersecuritynews.com)

29 Oct 2025

Dassault Apriso flaws added to CISA list of exploited vulnerabilities (www.scworld.com)

29 Oct 2025

Trending Adversarial Group(s)

Top 10 Adverserial groups suspected or known to be actively targetting vulnerabilities.

Zero Day ( 0-day)

Prev Next

Canon Allegedly Breached by Clop Ransomware via Oracle E-Business Suite 0-Day Hack (cybersecuritynews.com)

25 Nov 2025

⚡ Weekly Recap: Fortinet Exploit, Chrome 0-Day, BadIIS Malware, Record DDoS, SaaS Breach & More (thehackernews.com)

24 Nov 2025

CISA orders feds to patch Oracle Identity Manager zero-day after signs of abuse (go.theregister.com)

24 Nov 2025

Cybersecurity News Weekly Newsletter – Fortinet, Chrome 0-Day Flaws, Cloudflare Outage and Salesforce Gainsight Breach (cybersecuritynews.com)

23 Nov 2025

Saturday Security: Zero-Day Logitech Breach Exposes 1.8TB of Data (securityboulevard.com)

22 Nov 2025

CISA Warns of Actively Exploited Critical Oracle Identity Manager Zero-Day Vulnerability (thehackernews.com)

22 Nov 2025

Metasploit Adds Exploit Module for Recently Disclosed FortiWeb 0-Day Vulnerabilities (cybersecuritynews.com)

21 Nov 2025

North Korean Kimsuky and Lazarus Join Forces to Exploit Zero-Day Vulnerabilities Targeting Critical Sectors Worldwide (cybersecuritynews.com)

21 Nov 2025

Cl0p’s Oracle EBS Zero-Day Campaign: What We Know So Far (socradar.io)

21 Nov 2025

Critical Oracle Identity Manager Flaw Possibly Exploited as Zero-Day (www.securityweek.com)

21 Nov 2025

Broadcom Allegedly Breached by Clop Ransomware via E-Business Suite 0-Day Hack (cybersecuritynews.com)

21 Nov 2025

Oracle Allegedly Breached by Clop Ransomware via E-Business Suite 0-Day Hack (cybersecuritynews.com)

20 Nov 2025

Fortinet criticized for ‘silent’ patching after disclosing second zero-day vulnerability in same equipment (www.csoonline.com)

20 Nov 2025

ThreatsDay Bulletin: 0-Days, LinkedIn Spies, Crypto Crimes, IoT Flaws and New Malware Waves (thehackernews.com)

20 Nov 2025

Threat Actors Allegedly Selling Microsoft Office 0-Day RCE Vulnerability on Hacking Forums (cybersecuritynews.com)

20 Nov 2025

CISA Warns of Google Chrome 0-Day Vulnerability Exploited in Attacks (cybersecuritynews.com)

20 Nov 2025

Chrome V8 Zero-Day CVE-2025-13223 – Active Exploit Confirmed, Google Issues Security Fix (socradar.io)

19 Nov 2025

CVE-2025-58034: New FortiWeb Zero-Day Exploited, Enables OS Command Injection (socradar.io)

19 Nov 2025

Fortinet 'fesses up to second 0-day within a week (go.theregister.com)

19 Nov 2025

Fortinet Woes Continue With Another WAF Zero-Day Flaw (www.darkreading.com)

19 Nov 2025

A second Fortinet FortiWeb zero-day spurs 7-day CISA KEV deadline (www.scworld.com)

19 Nov 2025

Google addresses Chrome zero-day leveraged in attacks (www.scworld.com)

19 Nov 2025

Update Chrome ASAP - attackers are already exploiting this nasty zero-day flaw (www.zdnet.com)

19 Nov 2025

Fortinet Discloses Second Exploited FortiWeb Zero-Day in a Week (www.securityweek.com)

19 Nov 2025

New FortiWeb zero-day CVE-2025-58034 under attack patched by Fortinet (securityaffairs.com)

19 Nov 2025

New FortiWeb 0-Day Command Injection Vulnerability Exploited in the Wild (cybersecuritynews.com)

18 Nov 2025

Fortinet warns of new FortiWeb zero-day exploited in attacks (www.bleepingcomputer.com)

18 Nov 2025

Chrome zero-day under active attack: visiting the wrong site could hijack your browser (www.malwarebytes.com)

18 Nov 2025

More work for admins as Google patches latest zero-day Chrome vulnerability (www.csoonline.com)

18 Nov 2025

Google Chrome bug exploited as an 0-day - patch now or risk full system compromise (go.theregister.com)

18 Nov 2025

Logitech IT system hit by zero-day cyberattack (www.scworld.com)

18 Nov 2025

Google patches yet another exploited Chrome zero-day (CVE-2025-13223) (www.helpnetsecurity.com)

18 Nov 2025

Google fixes new Chrome zero-day flaw exploited in attacks (www.bleepingcomputer.com)

18 Nov 2025

Google fixed the seventh Chrome zero-day in 2025 (securityaffairs.com)

18 Nov 2025

Chrome 142 Update Patches Exploited Zero-Day (www.securityweek.com)

18 Nov 2025

Google Issues Security Fix for Actively Exploited Chrome V8 Zero-Day Vulnerability (thehackernews.com)

17 Nov 2025

Chrome Type Confusion Zero-Day Vulnerability Actively Exploited in the Wild (cybersecuritynews.com)

17 Nov 2025

Overconfidence is the new zero-day as teams stumble through cyber simulations (go.theregister.com)

17 Nov 2025

Logitech leaks data after zero-day attack (go.theregister.com)

16 Nov 2025

Week in review: Windows kernel flaw patched, suspected Fortinet FortiWeb zero-day exploited (www.helpnetsecurity.com)

16 Nov 2025

CVE-2025-64446: Fortinet FortiWeb Zero-Day Path Traversal Vulnerability Exploited in the Wild (www.tenable.com)

14 Nov 2025

Fortinet confirms silent patch for FortiWeb zero-day exploited in attacks (www.bleepingcomputer.com)

14 Nov 2025

A suspected Fortinet FortiWeb zero-day is actively exploited, researchers warn (www.helpnetsecurity.com)

14 Nov 2025

Washington Post Oracle E-Suite 0-Day Hack Impacts 9K+ Employees and Contractors (cybersecuritynews.com)

14 Nov 2025

Cl0P Ransomware Group Allegedly Claims Breach of Entrust in Oracle 0-Day EBS Hack (cybersecuritynews.com)

14 Nov 2025

Zero-day attacks against Cisco ISE, Citrix NetScaler observed (www.scworld.com)

13 Nov 2025

Zero-day exploits hit Cisco ISE and Citrix systems in an advanced campaign (www.csoonline.com)

13 Nov 2025

ThreatsDay Bulletin: Cisco 0-Days, AI Bug Bounties, Crypto Heists, State-Linked Leaks and 20 More Stories (thehackernews.com)

13 Nov 2025

Cisco ISE, CitrixBleed 2 Vulnerabilities Exploited as Zero-Days: Amazon (www.securityweek.com)

13 Nov 2025

Amazon alerts: advanced threat actor exploits Cisco ISE & Citrix NetScaler zero-days (securityaffairs.com)

13 Nov 2025

'CitrixBleed 2' Wreaks Havoc as Zero-Day Bug (www.darkreading.com)

12 Nov 2025

Actively exploited zero-day among dozens of patched Microsoft vulnerabilities (www.scworld.com)

12 Nov 2025

Attackers turned Citrix, Cisco 0-day exploits into custom-malware hellscape (go.theregister.com)

12 Nov 2025

November 2025 Patch Tuesday: Microsoft Fixes 63 Vulnerabilities, Including Windows Kernel Zero-Day (CVE-2025-62215) (socradar.io)

12 Nov 2025

CVE-2025-21042: Samsung Galaxy Zero-Day Exploited in LANDFALL Spyware Campaign (socradar.io)

12 Nov 2025

Amazon Uncovers Attacks Exploited Cisco ISE and Citrix NetScaler as Zero-Day Flaws (thehackernews.com)

12 Nov 2025

Hackers Actively Exploiting Cisco and Citrix 0-Days in the Wild to Deploy Webshell (cybersecuritynews.com)

12 Nov 2025

Hackers exploited Citrix, Cisco ISE flaws in zero-day attacks (www.bleepingcomputer.com)

12 Nov 2025

Microsoft Fixes 63 Security Flaws, Including a Windows Kernel Zero-Day Under Active Attack (thehackernews.com)

12 Nov 2025

November Patch Tuesday: Zero day Windows kernel flaw in servers, controllers, and PCs (www.csoonline.com)

11 Nov 2025

Synology fixes BeeStation zero-days demoed at Pwn2Own Ireland (www.bleepingcomputer.com)

11 Nov 2025

Patch Now: Microsoft Flags Zero-Day & Critical Zero-Click Bugs (www.darkreading.com)

11 Nov 2025

Microsoft Patches Actively Exploited Windows Kernel Zero-Day (www.securityweek.com)

11 Nov 2025

Toll of Oracle EBS zero-day attacks adds Allianz UK (www.scworld.com)

11 Nov 2025

Microsoft November 2025 Patch Tuesday fixes 1 zero-day, 63 flaws (www.bleepingcomputer.com)

11 Nov 2025

Microsoft November 2025 Patch Tuesday – 63 Vulnerabilities, Including 1 Zero-Day Fixed (cybersecuritynews.com)

11 Nov 2025

Patch now: Samsung zero-day lets attackers take over your phone (www.malwarebytes.com)

11 Nov 2025

Synology BeeStation 0-Day Vulnerability Let Remote Attackers Execute Arbitrary Code (cybersecuritynews.com)

11 Nov 2025

Attackers exploited another Gladinet Triofox zero-day (CVE-2025-12480) (www.helpnetsecurity.com)

11 Nov 2025

Hackers Exploiting Triofox 0-Day Vulnerability to Execute Malicious Payload Abusing Anti-Virus Feature (cybersecuritynews.com)

11 Nov 2025

CISA Warns of Samsung Mobile Devices 0-Day RCE Vulnerability Exploited in Attacks (cybersecuritynews.com)

10 Nov 2025

Severe QNAP NAS Zero-Day Flaws Patched After Pwn2Own 2025: What You Should Know (socradar.io)

10 Nov 2025

CISA orders feds to patch Samsung zero-day used in spyware attacks (www.bleepingcomputer.com)

10 Nov 2025

QNAP fixed multiple zero-days in its software demonstrated at Pwn2Own 2025 (securityaffairs.com)

09 Nov 2025

Cybersecurity News Weekly Newsletter – Android and Cisco 0-Day, Teams Flaws, HackedGPT, and Whisper Leak (cybersecuritynews.com)

09 Nov 2025

Seven QNAP Zero-Day Vulnerabilities Exploited at Pwn2Own 2025 Now Patched (cybersecuritynews.com)

08 Nov 2025

Hackers Hijacking Samsung Galaxy Phones by Exploiting 0-Day Using a Single Image Via WhatsApp (cybersecuritynews.com)

08 Nov 2025

LANDFALL spyware exploited Samsung zero-day CVE-2025-21042 in Middle East attacks (securityaffairs.com)

07 Nov 2025

Washington Post among breach victims in Oracle EBS zero-day attacks (www.scworld.com)

07 Nov 2025

Previously unknown Landfall spyware used in 0-day attacks on Samsung phones (go.theregister.com)

07 Nov 2025

QNAP fixes seven NAS zero-day flaws exploited at Pwn2Own (www.bleepingcomputer.com)

07 Nov 2025

New LandFall spyware exploited Samsung zero-day via WhatsApp messages (www.bleepingcomputer.com)

07 Nov 2025

Landfall Android Spyware Targeted Samsung Phones via Zero-Day (www.securityweek.com)

07 Nov 2025

Cisco Warns of Hackers Actively Exploiting ASA and FTD 0-day RCE Vulnerability in the Wild (cybersecuritynews.com)

06 Nov 2025

Clop Ransomware Actors Exploiting the Latest 0-Day Exploits in the Wild (cybersecuritynews.com)

06 Nov 2025

APT 'Bronze Butler' Exploits Zero-Day to Root Japan Orgs (www.darkreading.com)

05 Nov 2025

China-linked hackers exploited Lanscope flaw as a zero-day in attacks (www.bleepingcomputer.com)

01 Nov 2025

China-linked UNC6384 exploits Windows zero-day to spy on European diplomats (securityaffairs.com)

01 Nov 2025

Two Windows vulnerabilities, one a 0-day, are under active exploitation (arstechnica.com)

31 Oct 2025

Threat Actors Exploit LANSCOPE Endpoint Manager Zero-Day Vulnerability to Steal Confidential Data (cybersecuritynews.com)

31 Oct 2025

China-Linked Tick Group Exploits Lanscope Zero-Day to Hijack Corporate Systems (thehackernews.com)

31 Oct 2025

Windows zero-day actively exploited to spy on European diplomats (www.bleepingcomputer.com)

31 Oct 2025

CISA Flags VMware Zero-Day Exploited by China-Linked Hackers in Active Attacks (thehackernews.com)

31 Oct 2025

CISA Warns of VMware Tools and Aria Operations 0-Day Vulnerability Exploited in Attacks (cybersecuritynews.com)

30 Oct 2025

US Defense Contractor Boss Sold Zero Days to Russia — Cops a Plea (securityboulevard.com)

30 Oct 2025

Italian-made spyware Dante linked to Chrome zero-day exploitation campaign (www.helpnetsecurity.com)

28 Oct 2025

Chrome Zero-Day Exploited to Deliver Italian Memento Labs' LeetAgent Spyware (thehackernews.com)

28 Oct 2025

Memento Spyware Tied to Chrome Zero-Day Attacks (www.darkreading.com)

27 Oct 2025

Italian spyware vendor linked to Chrome zero-day attacks (www.bleepingcomputer.com)

27 Oct 2025

Chrome 0-Day Vulnerability Actively Exploited in Attacks by Notorious Hacker Group (cybersecuritynews.com)

27 Oct 2025

Chrome Zero-Day Exploitation Linked to Hacking Team Spyware (www.securityweek.com)

27 Oct 2025

Warlock Ransomware Actors Exploiting Sharepoint ToolShell Zero-Day Vulnerability in New Attack Wave (cybersecuritynews.com)

24 Oct 2025

Hackers Exploited 73 0-Day Vulnerabilities and Earned $1,024,750 (cybersecuritynews.com)

24 Oct 2025

Hackers earn $1,024,750 for 73 zero-days at Pwn2Own Ireland (www.bleepingcomputer.com)

24 Oct 2025

Bitter APT Hackers Exploit WinRAR Zero-Day Via Weaponized Word Documents to Steal Sensitive Data (cybersecuritynews.com)

23 Oct 2025

Pwn2Own Day 2: Organizers paid $792K for 56 0-days (securityaffairs.com)

23 Oct 2025

Salt Typhoon Using Zero-Day Exploits and DLL Sideloading Techniques to Attack Organizations (cybersecuritynews.com)

23 Oct 2025

Hackers Exploited Samsung Galaxy S25 0-Day Vulnerability to Enable Camera and Track Location (cybersecuritynews.com)

23 Oct 2025

CISA Adds Lanscope Endpoint Manager Zero-Day (CVE-2025-61932) to Known Exploited Vulnerabilities (socradar.io)

23 Oct 2025

Lanscope Endpoint Manager vulnerability exploited in zero-day attacks (CVE-2025-61932) (www.helpnetsecurity.com)

23 Oct 2025

Lanscope Endpoint Manager Zero-Day Exploited in the Wild (www.securityweek.com)

23 Oct 2025

Pwn2Own Day 2: Hackers exploit 56 zero-days for $790,000 (www.bleepingcomputer.com)

22 Oct 2025

Hackers Exploited 34 Zero-Day Vulnerabilities And Earned $522,500 In Pwn2Own Ireland 2025 (cybersecuritynews.com)

22 Oct 2025

Hackers exploit 34 zero-days on first day of Pwn2Own Ireland (www.bleepingcomputer.com)

21 Oct 2025

Envoy Air confirms breach tied to Oracle EBS zero-day vulnerability (www.scworld.com)

20 Oct 2025

Week in review: F5 data breach, Microsoft patches three actively exploited zero-days (www.helpnetsecurity.com)

19 Oct 2025

Actively exploited Gladinet CentreStack zero-day addressed (www.scworld.com)

17 Oct 2025

October 2025 Patch Tuesday: Microsoft Addresses 175 Vulnerabilities, Including 3 Exploited Zero-Days (socradar.io)

17 Oct 2025

Hackers used Cisco zero-day to plant rootkits on network switches (CVE-2025-20352) (www.helpnetsecurity.com)

17 Oct 2025

AISLE launches from stealth with AI-native cyber reasoning system to tackle zero-day vulnerabilities (www.helpnetsecurity.com)

17 Oct 2025

CVE News and Media Insights

Track CVE news reports and advisories in our news insights page. Quick filters by threat status, government advisory, top threat groups, top CVEs being talked about, and more. 90 days of CVE specific news with keyword search as well as a handy quick link to disaply in article CVE mentions taking you directly to our detailed CVE report.

View News Insights