vulnerabilities

December 17, 2025

Parked Domains Emerge as a Primary Channel for Malware and Phishing

The landscape of domain parking has undergone a significant transformation over the past decade, evolving from a relatively benign monetization…
Read More »
December 17, 2025

Russian Hackers Launch Attacks on Network Edge Devices in Western Critical Infrastructure

Russian state-sponsored hackers have intensified their attacks on misconfigured network edge devices across Western critical infrastructure, marking a significant shift…
Read More »
December 17, 2025

CISA Alerts on Apple WebKit Zero-Day Actively Used in Cyberattacks

The Cybersecurity and Infrastructure Security Agency (CISA) has added a critical zero-day vulnerability affecting multiple Apple products to its Known…
Read More »
December 16, 2025

Jaguar Land Rover Confirms August Cyberattack Led to Employee Data Theft

Jaguar Land Rover (JLR) has officially confirmed that a major cyberattack in August resulted in the theft of sensitive personal…
Read More »
December 16, 2025

PCPcat Malware Leverages React2Shell Vulnerability to Breach 59,000+ Servers

A sophisticated attack campaign attributed to a group identifying as “PCP” has compromised 59,128 servers in less than 48 hours…
Read More »
December 16, 2025

ZnDoor Malware Actively Exploits React2Shell to Breach Network Infrastructure

Since December 2025, security operations centers have identified a rising threat targeting Japanese enterprises through the exploitation of React2Shell (CVE-2025-55182),…
Read More »
December 16, 2025

NVIDIA Merlin Vulnerabilities Allows Malicious Code Execution and DoS Attacks

NVIDIA has issued urgent security patches for its Merlin machine learning framework, addressing two high-severity deserialization vulnerabilities that could allow…
Read More »
December 14, 2025

MITRE Unveils 2025’s Top 25 Most Dangerous Software Weaknesses

MITRE has released its annual Common Weakness Enumeration (CWE) Top 25 Most Dangerous Software Weaknesses list for 2025, identifying the…
Read More »
December 14, 2025

Apple Confirms Zero-Day Exploitation in Targeted Attacks on iPhone Users

Apple has recently released critical security patches to address two zero-day vulnerabilities that are being actively exploited on iPhone and…
Read More »
December 13, 2025

CISA Issues New Guidance for Securing UEFI Secure Boot on Enterprise Devices

The Cybersecurity and Infrastructure Security Agency (CISA) has issued critical guidance on managing UEFI Secure Boot configurations across enterprise systems,…
Read More »
December 13, 2025

Surge in Attacks Targeting RSC-Enabled Services Worldwide

In December 2025, CVE-2025-55182 (React2Shell), a vulnerability in React Server Components (RSC) that enables remote code execution (RCE), was publicly…
Read More »
December 12, 2025

Severe Flaws in React Server Components Enable DoS Attacks and Code Exposure

Recently, security researchers uncovered two new vulnerabilities in React Server Components, which put servers at risk of Denial-of-Service (DoS) attacks…
Read More »
December 12, 2025

644K+ Websites at Risk Due to Critical React Server Components Flaw

A critical vulnerability known as “React2Shell” has been identified by the Shadowserver Foundation, posing a significant threat to a massive…
Read More »
December 10, 2025

Zoom Rooms on Windows and macOS Exposed to Privilege Escalation and Data Leakage Flaws

Zoom has released security patches to address two critical vulnerabilities in Zoom Rooms deployments on both Windows and macOS. These…
Read More »
December 10, 2025

Makop Ransomware Evolves with Advanced Evasion Techniques and Exploit Arsenal

Makop, a ransomware strain derived from Phobos, continues to pose a significant threat by exploiting exposed Remote Desktop Protocol (RDP)…
Read More »
December 9, 2025

Akira Group Targets Hyper-V and VMware ESXi with Ransomware Exploiting Vulnerabilities

Hypervisors, the invisible backbone of modern corporate IT, have become the new primary battleground for ransomware groups. According to new…
Read More »
December 8, 2025

LOLPROX Unveils Undetected Exploitation Routes for Stealthy Hypervisor Attacks

A new security analysis has unveiled “LOLPROX,” a comprehensive catalog of “Living Off The Land” (LOL) techniques specifically targeting Proxmox…
Read More »
December 7, 2025

Beyond CVEs – Turning Visibility into Action with ASM

Torrance, California, USA, December 5th, 2025, CyberNewsWire Criminal IP will host a live webinar on December 16 at 11:00 AM…
Read More »
December 6, 2025

2.15M Next.js Web Services Exposed Online, Active Attacks Reported

Security teams worldwide are rushing to patch systems after the disclosure of a critical React vulnerability, CVE-2025-55182, widely known as…
Read More »
December 5, 2025

Avast Antivirus Sandbox Vulnerabilities Allow Privilege Escalation

SAFA researchers uncovered four kernel heap overflow vulnerabilities in Avast Antivirus’s aswSnx.sys driver, designated CVE-2025-13032, affecting versions before 25.3 on…
Read More »

Previous page Next page