Technology ❯ Software

Vulnerabilities

Zero-Day Exploits Remote Code Execution CVE Exploitation CVE Identifiers Security Flaws Windows Denial of Service Oracle E-Business Suite Security Updates Aviation Software Authentication Bypass Injection Flaw Apple software vulnerabilities Specific Technologies and Appliances Patch Management LG Smart TVs Authentication Flaws PHP SQLite Security Zero-Day Microsoft SharePoint Malware CVE-2025-8875 SAP NetWeaver Driver Vulnerabilities Cisco SharePoint Zero-Day Vulnerabilities Access Control SAP Netweaver Zero-day Vulnerabilities Zero-Day Flaws Elevation of Privilege Exploitations Cybersecurity Risks Oracle E-business Suite CVE-2025-10035 CVE-2025-61882 Apple Software Kentico Xperience CMS Microsoft Windows Android Kernel Vulnerabilities iOS Cybersecurity Microsoft Outlook Aerospace Software Mozilla Firefox CVE-2023-34362 Active Exploits Bug Fixes Citrix CVE-2023-46805 Zero day Connect Secure Zero-days Server-side Request Forgery (SSRF)

ICO Fines LastPass £1.2 Million Over 2022 Breach Affecting 1.6 Million UK Users

The watchdog blames weak access controls and poor alerting for the breach.

Apple Podcasts Auto-Opens to Unwanted Shows, Raising Security Concerns

WrtHug Campaign Hijacks About 50,000 ASUS Routers Worldwide

Logitech Confirms Data Breach Tied to Third-Party Zero-Day Exploit

GlobalLogic Confirms Oracle EBS Breach Exposed Data on 10,471 Staff as Clop Campaign Widens

Ransomware Payouts Plunge to New Low as Extortionists Pivot to Data Theft

CISA Flags Active Exploits of Windows SMB Privilege Bug, Sets Nov. 10 Patch Deadline

Microsoft Restricts IE Mode in Edge After Zero-Day Exploits

Google Says Oracle E‑Business Suite Zero‑Day Fueled Data Theft at Dozens, Likely Over 100

Microsoft Links Medusa Affiliate to Exploits of Critical GoAnywhere Flaw

Apple Releases Security Updates to Patch FontParser Memory-Corruption Bug

SonicWall Halts Cloud Backups After Breach Exposes Firewall Configurations

Microsoft’s September Patch Tuesday Fixes 80–86 Flaws, Two Disclosed Zero-Days, No Active Exploits

Samsung Begins Rolling Out September 2025 Security Patch With 25 Extra Galaxy Fixes

Silver Fox Uses Trusted Windows Drivers to Deliver ValleyRAT and Evade Blocklists

CrowdStrike Details Surge in China-Linked ‘Murky Panda’ Cloud Intrusions Targeting North America

Colt Confirms Data Theft as Warlock Ransomware Auctions Stolen Files

Colt Outage Persists After SharePoint Exploit as Ransomware Group Puts Data Up for Sale

CISA Lists Two N-able N-central Flaws as Actively Exploited

Darktrace Details First Auto-Color Malware Attack Exploiting Patched SAP NetWeaver Flaw