Google Issues Security Fix for Actively Exploited Chrome V8 Zero-Day Vulnerability

Google on Monday released security updates for its Chrome browser to address two security flaws, including one that has come under active exploitation in the wild. The vulnerability in question is CVE-2025-13223 CVSS score: 8.8, a type confusion vulnerability in the V8 JavaScript and WebAssembly...

A week in security (November 10 – November 16)

Last week on Malwarebytes Labs: Be careful responding to unexpected job interviews Your passport, now on your iPhone. Helpful or risky? 1 million victims, 17,500 fake sites: Google takes on toll-fee scammers Are you paying more than other people? NY cracks down on surveillance pricing We opened a...

PT-2025-47132

Microsoft's latest security updates patch over 60 vulnerabilities, including a zero-day vulnerability CVE-2025-62215 and a critical flaw CVE-2025-60274 in a core Windows graphic component, exposing systems to potential exploitation and remote code execution. Defenders should prioritize patching...

CVE-2025-43401

creationtimestamp| type| source ---|---|--- 2025-11-13 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1005/ 2026-04-02 22:20:32+00:00| seen| Telegram/wWHvFepuomphlvUrhwS7vzUP2t5qXRFryLArMmzBGR2vgG4...

CVE-2025-43432

creationtimestamp| type| source ---|---|--- 2025-11-13 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1011/...

CVE-2025-43380

creationtimestamp| type| source ---|---|--- 2025-11-13 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1008/...

CVE-2025-43445

creationtimestamp| type| source ---|---|--- 2025-11-13 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1006/...

CVE-2025-43383

creationtimestamp| type| source ---|---|--- 2025-11-13 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1003/...

CVE-2025-43384

creationtimestamp| type| source ---|---|--- 2025-11-13 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1009/...

CVE-2025-43386

creationtimestamp| type| source ---|---|--- 2025-11-13 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1004/...

CVE-2025-43457

creationtimestamp| type| source ---|---|--- 2025-11-13 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1010/...

EUVD-2025-131910

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Golemiq 0 Day Analytics allows SQL Injection.This issue affects 0 Day Analytics: from n/a through 4.0.0...

CVE-2025-64293

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Golemiq 0 Day Analytics 0-day-analytics allows SQL Injection.This issue affects 0 Day Analytics: from n/a through = 4.0.0...

CVE-2025-64293 WordPress 0 Day Analytics plugin <= 4.0.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Golemiq 0 Day Analytics 0-day-analytics allows SQL Injection.This issue affects 0 Day Analytics: from n/a through = 4.0.0...

CVE-2025-64293

CVE-2025-64293 affects the WordPress plugin “0 Day Analytics” (WordPress plugin) up to and including version 4.0.0. The issue is an SQL Injection caused by improper neutralization of special elements in SQL commands, enabling attacker-controlled input to alter queries. Consequences cited in the s...

Amazon Uncovers Attacks Exploited Cisco ISE and Citrix NetScaler as Zero-Day Flaws

Amazon's threat intelligence team on Wednesday disclosed that it observed an advanced threat actor exploiting two then-zero-day security flaws in Cisco Identity Service Engine ISE and Citrix NetScaler ADC products as part of attacks designed to deliver custom malware. "This discovery highlights t...

Update now: November Patch Tuesday fixes Windows zero-day exploited in the wild

These updates fix serious security issues — including one that attackers are already exploiting to take control of Windows systems. By chaining it with other attacks, they can gain full admin access, install malware, steal data, or make deeper changes you wouldn’t normally be able to undo. Run...

Microsoft Fixes 63 Security Flaws, Including a Windows Kernel Zero-Day Under Active Attack

Microsoft on Tuesday released patches for 63 new security vulnerabilities identified in its software, including one that has come under active exploitation in the wild. Of the 63 flaws, four are rated Critical and 59 are rated Important in severity. Twenty-nine of these vulnerabilities are relate...

MAL-2025-139432 Malicious code in antares-polaris-vuetify-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84a547d349d71e54630949a781fd9237275efb916048f36953d6392e2995c320 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

PT-2025-46673

Name of the Vulnerable Software and Affected Versions Golemiq 0 Day Analytics versions through 4.0.0 Description A flaw exists in Golemiq 0 Day Analytics that allows for SQL Injection due to improper neutralization of special elements used in SQL commands. The issue allows attackers to inject...