CL0P-Linked Hackers Breach Dozens of Organizations Through Oracle Software Flaw

Dozens of organizations may have been impacted following the zero-day exploitation of a security flaw in Oracle's E-Business Suite EBS software since August 9, 2025, Google Threat Intelligence Group GTIG and Mandiant said in a new report released Thursday. "We're still assessing the scope of this...

Ensuring Safe and Reliable Updates with Qualys TruRisk™ Manifest Version Control

The Fragility of “One Bad Update” In cybersecurity, speed is non-negotiable. New vulnerabilities surface daily, and enterprises expect coverage the moment exploits are in the wild. For years, the mantra was simple: push signatures fast, and you reduce risk. Faster updates meant faster protection...

CVE-2025-11002

creationtimestamp| type| source ---|---|--- 2025-10-07 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-950/ 2025-10-08 08:09:58+00:00| seen| https://gist.github.com/Darkcrai86/8508c349ba4e99ff9e5cbe7e7764be43 2025-10-10 16:27:18+00:00| seen|...

CVE-2025-11001

creationtimestamp| type| source ---|---|--- 2025-10-07 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-949/ 2025-10-08 08:10:22+00:00| seen| https://gist.github.com/Darkcrai86/de445accac842710e2754fceb4167b45 2025-10-10 16:27:18+00:00| seen|...

(0Day) Ivanti Endpoint Manager Report_RunPatch SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Endpoint Manager. Authentication is required to exploit this vulnerability. The specific flaw exists within the ReportRunPatch class. The issue results from the lack of proper validation of a...

CVE-2025-61882: Critical 0day in Oracle E-Business Suite exploited in-the-wild

Overview On Saturday, October 4, 2025, Oracle published an advisory and accompanying patch for CVE-2025-61882. This new vulnerability affects the Oracle Concurrent Processing product within Oracle E-Business Suite EBS, and has a CVSS score of 9.8 Critical. Per the vendor advisory, the vulnerabili...

⚡ Weekly Recap: Oracle 0-Day, BitLocker Bypass, VMScape, WhatsApp Worm & More

The cyber world never hits pause, and staying alert matters more than ever. Every week brings new tricks, smarter attacks, and fresh lessons from the field. This recap cuts through the noise to share what really matters—key trends, warning signs, and stories shaping today’s security landscape...

⚡ Weekly Recap: Oracle 0-Day, BitLocker Bypass, VMScape, WhatsApp Worm & More

The cyber world never hits pause, and staying alert matters more than ever. Every week brings new tricks, smarter attacks, and fresh lessons from the field. This recap cuts through the noise to share what really matters—key trends, warning signs, and stories shaping today's security landscape...

Zimbra Zero-Day Exploited to Target Brazilian Military via Malicious ICS Files

A now patched security vulnerability in Zimbra Collaboration was exploited as a zero-day earlier this year in cyber attacks targeting the Brazilian military. Tracked as CVE-2025-27915 CVSS score: 5.4, the vulnerability is a stored cross-site scripting XSS vulnerability in the Classic Web Client...

Zimbra Zero-Day Exploited to Target Brazilian Military via Malicious ICS Files

A now patched security vulnerability in Zimbra Collaboration was exploited as a zero-day earlier this year in cyber attacks targeting the Brazilian military. Tracked as CVE-2025-27915 CVSS score: 5.4, the vulnerability is a stored cross-site scripting XSS vulnerability in the Classic Web Client...

PT-2025-40895

Critical zero-day vulnerability in Oracle E-Business Suite. Vuln info at SecAlerts: CVE-2021-61882, CVSS 9.8: https://t.co/l5AXE99mx6 ciso cio cto vulnerabilities cybersecurity secalerts msp mssp CVE202561882 oracle https://t.co/HuEuydSF3C...

CVE-2025-11202

creationtimestamp| type| source ---|---|--- 2025-10-03 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-930/ 2025-10-29 22:25:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4eihqy7i32q...

CVE-2025-11201

creationtimestamp| type| source ---|---|--- 2025-10-03 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-931/ 2025-10-29 22:15:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4ehvtzlhv2b 2025-11-07 16:45:21+00:00| seen|...

$20 YoLink IoT Gateway Vulnerabilities Put Home Security at Risk

Four critical zero-day flaws found in the $20 YoLink Smart Hub allow remote physical access, threatening your home security. See the urgent steps you must take now...

MALF: A Multi-Agent LLM Framework for Intelligent Fuzzing of Industrial Control Protocols

Industrial control systems ICS are vital to modern infrastructure but increasingly vulnerable to cybersecurity threats, particularly through weaknesses in their communication protocols. This paper presents MALF Multi-Agent LLM Fuzzing Framework, an advanced fuzzing solution that integrates large...

WAFinity---Infinite-Protection-Intelligent-Detection

WAFinity - Infinite Protection, Intelligent Detection WAFin...

Microsoft SharePoint Zero-Day Exploitation: What Public Sector Leaders Should Know

The Rapid7 September 2025 Threat Report highlights active exploitation of a critical Microsoft SharePoint vulnerability, CVE-2025-53770. This zero-day attack is being used by threat actors to gain initial access to victim networks, with exploitation observed in government as well as multiple othe...

Urgent: China-Linked Hackers Exploit New VMware Zero-Day Since October 2024

A newly patched security flaw impacting Broadcom VMware Tools and VMware Aria Operations has been exploited in the wild as a zero-day since mid-October 2024 by a threat actor called UNC5174, according to NVISO Labs. The vulnerability in question is CVE-2025-41244 CVSS score: 7.8, a local privileg...

⚡ Weekly Recap: Cisco 0-Day, Record DDoS, LockBit 5.0, BMC Bugs, ShadowV2 Botnet & More

Cybersecurity never stops—and neither do hackers. While you wrapped up last week, new attacks were already underway. From hidden software bugs to massive DDoS attacks and new ransomware tricks, this week's roundup gives you the biggest security moves to know. Whether you're protecting key systems...

⚡ Weekly Recap: Cisco 0-Day, Record DDoS, LockBit 5.0, BMC Bugs, ShadowV2 Botnet & More

Cybersecurity never stops—and neither do hackers. While you wrapped up last week, new attacks were already underway. From hidden software bugs to massive DDoS attacks and new ransomware tricks, this week’s roundup gives you the biggest security moves to know. Whether you’re protecting key systems...