Collaborate Disseminate
Unknown attackers have exploited a vulnerability (CVE-2025‑54309) in the CrushFTP enterprise file-transfer server solution to gain administrative access to vulnerable deployments. It’s currently unclear what the attackers are using this access fo… Continue reading Critical CrushFTP vulnerability exploited. Have you been targeted? (CVE-2025-54309)
Attackers are exploiting a zero-day variant (CVE-2025-53770) of a SharePoint remote code execution vulnerability (CVE-2025-49706) that Microsoft patched earlier this month, the company has confirmed on Saturday. CVE-2025-53770 is being leveraged to pla… Continue reading Microsoft SharePoint servers under attack via zero-day vulnerability with no patch (CVE-2025-53770)
Unknown intruders are targeting fully patched end-of-life SonicWall Secure Mobile Access (SMA) 100 series appliances and deploying a novel, persistent backdoor / rootkit, analysts with Google’s Threat Intelligence Group (GTIG) have warned. The an… Continue reading SonicWall SMA devices persistently infected with stealthy OVERSTEP backdoor and rootkit
For the fifth time this year, Google has patched a Chrome zero-day vulnerability (CVE-2025-6558) exploited by attackers in the wild. About CVE-2025-6558 CVE-2025-6558 is a high-severity vulnerability that stems from incorrect validation of untrusted in… Continue reading Update Google Chrome to fix actively exploited zero-day (CVE-2025-6558)
UEFI firmware running on 100+ Gigabyte motherboard models is affected by memory corruption vulnerabilities that may allow attackers to install persistent and difficult-to-detect bootkits (i.e., malware designed to infect the computer’s boot proce… Continue reading Vulnerable firmware for Gigabyte motherboards could allow bootkit installation
With two proof-of-concept (PoC) exploits made public late last week, CVE-2025-25257 – a critical SQL command injection vulnerability in Fortinet’s FortiWeb web application firewall – is expected to be leveraged by attackers soon. Abou… Continue reading Exploits for unauthenticated FortiWeb RCE are public, so patch quickly! (CVE-2025-25257)
Threat actors are actively exploiting a recently fixed remote code execution vulnerability (CVE-2025-47812) in Wing FTP Server, security researchers have warned. Wing FTP Server and CVE-2025-47812 Wing FTP Server is a commercial file transfer server so… Continue reading Critical Wing FTP Server vulnerability exploited in the wild (CVE-2025-47812)
Four individuals suspected of having been involved in the ransomware attacks that hit UK-based retailers earlier this year have been arrested by the UK National Crime Agency. “Two males aged 19, another aged 17, and a 20-year-old female were appr… Continue reading Four arrested in connection with M&S, Co-op ransomware attacks
Claroty researcher Noam Moshe has discovered serious vulnerabilities in two Ruckus Networks (formerly Ruckus Wireless) products that may allow attackers to compromise the environments managed by the affected software, Carnegie Mellon University’s CERT … Continue reading Ruckus network management solutions riddled with unpatched vulnerabilities
“In today’s fast-paced digital landscape” – as AI chatbots are fond of phrasing it – a cyber attack targeting your organization is a statistical certainty. But is your security team ready to respond when it happens? Can th… Continue reading Train smarter, respond faster: Close the skill gaps in your SOC