Friday, November 21, 2025
Follow on LinkedIn
WrtHug ASUS Routers

Massive Hacking Operation WrtHug Compromises Thousands of ASUS Routers Worldwide

A sophisticated cyber campaign known as Operation WrtHug has hijacked tens of thousands of ASUS WRT routers globally, turning them into potential espionage tools...

Multiple Vulnerabilities in D-Link EoL/EoS Routers Allows Remote Code Execution Attacks

Multiple critical vulnerabilities affect D-Link DIR-878 routers across all models and firmware revisions. These devices reached the end of life on January 31, 2021....
FortiWeb 0-Day Code Execution Vulnerability

New FortiWeb 0-Day Command Injection Vulnerability Exploited in the Wild

Fortinet has released an urgent security advisory addressing a newly discovered zero-day vulnerability, CVE-2025-58034, in its FortiWeb web application firewall platform, after evidence emerged...
W3 Total Cache Command Injection Vulnerability

W3 Total Cache Command Injection Vulnerability Exposes 1 Million WordPress Sites to RCE Attacks

A critical command injection vulnerability has been discovered in the W3 Total Cache plugin, one of WordPress's most popular caching solutions used by approximately 1 million...
Immunify AI-Bolit Vulnerability

Imunify AI-Bolit Vulnerability Let Execute Arbitrary Code and Escalate Privileges to Root

A serious security flaw was discovered in the AI-Bolit component of Imunify products. This vulnerability allows attackers to run arbitrary code and even become...
CISA Lynx+ Gateway Vulnerability

CISA Warns of Critical Lynx+ Gateway Vulnerability Exposes Data in Cleartext

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical warning about a severe vulnerability in Lynx+ Gateway devices that could expose sensitive...
IBM AIX Vulnerabilities

IBM AIX Vulnerabilities Let Remote Attacker Execute Arbitrary Commands

IBM has released critical security updates addressing two severe vulnerabilities in its AIX operating system that could allow remote attackers to execute arbitrary commands...
Chrome Type Confusion Zero-Day

Chrome Type Confusion Zero-Day Vulnerability Actively Exploited in the Wild

Google has rushed out a critical update for its Chrome browser to address a zero-day vulnerability actively exploited in the wild, urging users to...

Critical RCE Vulnerabilities in AI Inference Engines Exposes Meta, Nvidia and Microsoft Frameworks

As artificial intelligence infrastructure rapidly expands, critical security flaws threaten the backbone of enterprise AI deployments. Security researchers at Oligo Security have uncovered a series...
XWiki Vulnerability Exploited in the Wild

Hackers Exploiting XWiki Vulnerability in the Wild to Hire the Servers for Botnet

A sharp increase in attacks targeting a critical vulnerability in XWiki servers. Multiple threat actors are actively exploiting CVE-2025-24893 to deploy botnets and coin miners, and...
CSN

Top 10