Friday, November 21, 2025
Follow on LinkedIn
CISA Fortinet FortiWeb Vulnerability

CISA Warns of Fortinet FortiWeb OS Command Injection Vulnerability Exploited in the Wild

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning about a critical vulnerability affecting Fortinet FortiWeb appliances that threat actors are...
Palo Alto PAN-OS Firewall Vulnerability

Palo Alto PAN-OS Firewall Vulnerability Let Attackers Reboot Firewall by Sending Malicious Packet

Palo Alto Networks has disclosed a critical denial-of-service vulnerability in its PAN-OS firewall software that allows unauthenticated attackers to remotely reboot firewalls by sending...

Zoom Workplace for Windows Vulnerability Allow Users to Escalate Privilege

A security vulnerability has been discovered in Zoom Workplace VDI Client for Windows that could allow attackers to gain elevated privileges on affected systems. The...

Critical Vulnerability in Popular NPM Library Exposes AI and NLP Apps to Remote Code...

A critical security flaw has been discovered in the widely used npm package expr-eval, potentially exposing AI and natural language processing applications to remote...

Hackers Can Attack Active Directory Sites to Escalate Privileges and Domain Compromise

Active Directory sites are designed to optimize network performance across geographically separated organizations by managing replication and authentication across multiple locations. The Synacktiv security researchers...

Cisco Unified Contact Center Express Vulnerabilities Let Remote Attacker Execute Malicious Code

Cisco has disclosed multiple critical vulnerabilities in Unified Contact Center Express (CCX) that allow unauthenticated remote attackers to execute malicious code and escalate privileges. The...
XWiki remote code vulnerability

Hackers Actively Scanning Internet to Exploit XWiki Remote Code Execution Vulnerability

A critical remote code execution vulnerability affecting XWiki's SolrSearch component has become the target of widespread exploitation attempts, prompting cybersecurity authorities to add it...
AMD Zen5 RDSEED Vulnerability

AMD Zen 5 Processors RDSEED Vulnerability Breaks Integrity With Randomness

AMD has disclosed a critical vulnerability affecting its Zen 5 processor lineup that compromises the reliability of random number generation, a fundamental security feature...
Linux Kernel Use-After-Free Vulnerability Exploited

CISA Warns of Linux Kernel Use-After-Free Vulnerability Exploited in Attacks to Deploy Ransomware

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert about a critical use-after-free vulnerability in the Linux kernel, tracked as...

WordPress Plugin Vulnerability Exposes 7 Million Sites to XSS Attack

A critical cross-site scripting (XSS) vulnerability has been discovered in the popular LiteSpeed Cache plugin for WordPress, affecting millions of websites worldwide. The vulnerability, tracked...
CSN

Top 10