The U.S. CISA has added a critical vulnerability in WinRAR, tracked as CVE-2025-6218, to its KEV list due to active exploitation by threat actors like GOFFEE, Bitter, and Gamaredon. This flaw enables code execution through path traversal and has been weaponized in targeted attacks, including espionage and malware delivery. #CISA #WinRARVulnerability…
Category: Cyber Security News
Cloud security threats are evolving with attackers exploiting misconfigurations, AI masking, and overprivileged permissions. The upcoming Palo Alto Networks webinar will provide in-depth technical insights and practical strategies to identify and mitigate these sophisticated risks. #AWSIdentityMisconfigurations #AIModels #KubernetesPermissions…
Industrial leaders Siemens, Schneider Electric, Rockwell Automation, and Phoenix Contact release Patch Tuesday advisories revealing critical and high-severity vulnerabilities in their ICS/OT products. These flaws enable remote code execution, DoS, and man-in-the-middle attacks, threatening critical infrastructure security. #SiemensVulnerabilities #OTSecurity…
SAP has released 14 security notes, including three critical vulnerabilities patched in December 2025, affecting Solution Manager, Tomcat servers, and Sybase ASE. These flaws pose significant risks such as remote code execution and administrative breaches, urging immediate patch application. #SAPSolutionManager #ApacheTomcat #SybaseASE…
Ivanti has released patches for four critical vulnerabilities in Endpoint Manager, including a high-severity flaw that enables remote code execution. These updates address several security issues, such as stored XSS, file writing, and cryptographic signature verification problems, with no known exploitation in the wild yet. #CVE-2025-10573 #EndpointManagerSecurity…
The Indian Central Bureau of Investigation has charged 30 individuals, including Chinese nationals, for running a transnational cyber fraud network that stole over ₹1,000 crore during the COVID-19 pandemic. The scheme involved fake cryptocurrency platforms, shell companies, and exploitation of payment aggregation systems to launder money and target Indian investors. #ShigooTechnology…
Australia has implemented a nationwide ban on social media for children under 16, affecting over one million young users. This bold move aims to protect children from online harms but raises questions about its effectiveness and broader social implications. #Australia #SocialMediaBan #ChildProtection…
This article discusses a vulnerability in U-Boot bootloader versions prior to 2017.11, which allows potential arbitrary code execution due to improper access control in volatile memory. The flaw affects multiple Qualcomm chips and requires mitigation through updates and security practices. #UBoot #Qualcomm #CVE202524857…
Fortinet, Ivanti, and SAP have issued security patches for critical vulnerabilities that could allow unauthorized access, code execution, or authentication bypass. Organizations should apply these updates promptly to protect their systems from potential exploits. #FortinetCVEs #IvantiSecurityUpdate #SAPVulnerabilities…
Three recent PCIe vulnerabilities, affecting the PCIe Integrity and Data Encryption standard, have been identified by Intel researchers. These flaws could potentially lead to data leaks, privilege escalation, or service disruptions but require physical access to exploit. #IntelVulnerabilities #PCIeIDE #HardwareSecurity…
The HSE is offering financial compensation to individuals affected by the 2021 Conti ransomware attack that compromised sensitive health data. This marks a significant acknowledgment by the organization of the breach’s impact and the ongoing legal and cybersecurity repercussions. #Conti #HSE #cyberattack #databreach #Ireland…
The resignation of Coupang’s CEO followed a massive data breach exposing personal information of millions, highlighting the importance of cybersecurity in South Korea’s corporate landscape. The incident has prompted regulatory scrutiny and industry-wide security enhancements, emphasizing accountability at the executive level. #Coupang #DataBreach #SouthKoreaCybersecurity…
Microsoft released the KB5071546 security update for Windows 10, fixing 57 vulnerabilities including three zero-day flaws. The update enhances security by addressing remote code execution in PowerShell and applies automatically to supported systems. #PowerShell #ZeroDayFlaw #Windows10Security
Microsoft has introduced a warning system in Windows PowerShell 5.1 when using Invoke-WebRequest to download web content, aimed at preventing the execution of malicious scripts. This update addresses the CVE-2025-54100 vulnerability, primarily affecting enterprise environments that rely on PowerShell scripts for automation. #CVE-2025-54100 #PowerShellVulnerability
SAP has issued December security updates addressing 14 vulnerabilities, including three critical flaws with high CVSS scores. These updates cover significant issues like code injection, deserialization, and Apache Tomcat vulnerabilities, emphasizing the ongoing need for enterprise patch management. #SAPSolutionManager #SAPCommerceCloud #SAPjConnect