cyber news

Chrome Update Fixes High-Severity Vulnerabilities Allowing Arbitrary Code Execution

Google has released a critical security update for Chrome, addressing six vulnerabilities that pose serious threats to user security. The…

8 months ago

FortiWeb Vulnerability Enables Attackers to Impersonate Any User

Fortinet has disclosed a critical authentication bypass vulnerability in its FortiWeb web application firewall that allows unauthenticated attackers to log…

8 months ago

Critical FortiSIEM Vulnerability Exploited in the Wild: PoC Enables Remote Command Execution

Fortinet has issued an urgent security advisory for a critical vulnerability in FortiSIEM that allows unauthenticated attackers to execute arbitrary…

8 months ago

New 0-Click NTLM Credential Leak Vulnerability Evades Microsoft’s CVE-2025-24054 Patch

A critical zero-click vulnerability that circumvents Microsoft's security patch for CVE-2025-24054, enabling attackers to extract NTLM credentials without any user…

8 months ago

Microsoft Teams RCE Vulnerability Lets Hackers Steal, Alter, and Erase Messages

Microsoft has disclosed a significant remote code execution vulnerability in Teams that could enable attackers to compromise enterprise communications and…

8 months ago

Over 7,000 Citrix NetScaler Devices Remain Vulnerable to CVE-2025-5777 and CVE-2025-6543

Over 7,400 Citrix NetScaler appliances worldwide remain unpatched against two high-severity vulnerabilities—CVE-2025-5777 and CVE-2025-6543—raising urgent concerns about active exploitation and…

8 months ago

Royal Enfield Reportedly Targeted in Ransomware Attack, Hackers Claim to Have Encrypted Data

In what appears to be a significant cybersecurity incident, threat actors have claimed a full compromise of Royal Enfield’s internal…

8 months ago

SAP Security Patch Day Fixes 15 Vulnerabilities, Including 3 Critical Injection Vulnerabilities

On August 12, 2025, SAP released its monthly Security Patch Day addressing 15 new vulnerabilities across multiple SAP products, marking…

8 months ago

Apache bRPC Vulnerability Enables Remote Service Crash

A critical vulnerability in Apache bRPC's Redis protocol parser has been identified that allows remote attackers to execute denial-of-service attacks…

8 months ago

Hackers Turn Linux Webcams into Keystroke-Injecting Attack Tools

A critical vulnerability that transforms ordinary USB webcams into sophisticated cyber weapons, marking the first documented case where attackers can…

8 months ago