CVE-2025-59227

creationtimestamp| type| source ---|---|--- 2025-10-14 16:38:05+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0315 2025-10-14 16:38:44+00:00| seen| https://www.thezdi.com/blog/2025/10/14/the-october-2025-security-update-review 2025-10-14 20:57:38+00:00| seen|...

CVE-2025-59237

creationtimestamp| type| source ---|---|--- 2025-10-14 16:38:05+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0315 2025-10-14 16:38:44+00:00| seen| https://www.thezdi.com/blog/2025/10/14/the-october-2025-security-update-review...

CVE-2025-55248

creationtimestamp| type| source ---|---|--- 2025-10-14 16:21:47+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0313 2025-10-14 16:38:44+00:00| seen| https://www.thezdi.com/blog/2025/10/14/the-october-2025-security-update-review 2025-10-16 12:00:53+00:00| seen|...

Microsoft Limits IE Mode in Edge After Chakra Zero-Day Activity Detected

Microsoft restricted access to Edge's IE Mode in August 2025 after hackers used a Chakra zero-day flaw to bypass security and take over user devices. Check out the new steps for enabling IE Mode...

CVE-2025-61882: Imperva Customers Protected Against Critical Oracle EBS Zero-Day RCE

TL;DR: In early October 2025, Oracle released an emergency security alert addressing CVE-2025-61882, a high-severity unauthenticated remote code execution RCE vulnerability in the Concurrent Processing / BI Publisher Integration component of Oracle E-Business Suite EBS versions 12.2.3 through...

⚡ Weekly Recap: WhatsApp Worm, Critical CVEs, Oracle 0-Day, Ransomware Cartel & More

Every week, the cyber world reminds us that silence doesn't mean safety. Attacks often begin quietly — one unpatched flaw, one overlooked credential, one backup left unencrypted. By the time alarms sound, the damage is done. This week's edition looks at how attackers are changing the game — linki...

Microsoft Locks Down IE Mode After Hackers Turned Legacy Feature Into Backdoor

Microsoft said it has revamped the Internet Explorer IE mode in its Edge browser after receiving "credible reports" in August 2025 that unknown threat actors were abusing the backward compatibility feature to gain unauthorized access to users' devices. "Threat actors were leveraging basic social...

CL0P-Linked Hackers Breach Dozens of Organizations Through Oracle Software Flaw

Dozens of organizations may have been impacted following the zero-day exploitation of a security flaw in Oracle's E-Business Suite EBS software since August 9, 2025, Google Threat Intelligence Group GTIG and Mandiant said in a new report released Thursday. "We're still assessing the scope of this...

Ensuring Safe and Reliable Updates with Qualys TruRisk™ Manifest Version Control

The Fragility of “One Bad Update” In cybersecurity, speed is non-negotiable. New vulnerabilities surface daily, and enterprises expect coverage the moment exploits are in the wild. For years, the mantra was simple: push signatures fast, and you reduce risk. Faster updates meant faster protection...

CVE-2025-11001

creationtimestamp| type| source ---|---|--- 2025-10-07 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-949/ 2025-10-08 08:10:22+00:00| seen| https://gist.github.com/Darkcrai86/de445accac842710e2754fceb4167b45 2025-10-10 16:27:18+00:00| seen|...

CVE-2025-11002

creationtimestamp| type| source ---|---|--- 2025-10-07 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-950/ 2025-10-08 08:09:58+00:00| seen| https://gist.github.com/Darkcrai86/8508c349ba4e99ff9e5cbe7e7764be43 2025-10-10 16:27:18+00:00| seen|...

(0Day) Ivanti Endpoint Manager Report_RunPatch SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Endpoint Manager. Authentication is required to exploit this vulnerability. The specific flaw exists within the ReportRunPatch class. The issue results from the lack of proper validation of a...

CVE-2025-61882: Critical 0day in Oracle E-Business Suite exploited in-the-wild

Overview On Saturday, October 4, 2025, Oracle published an advisory and accompanying patch for CVE-2025-61882. This new vulnerability affects the Oracle Concurrent Processing product within Oracle E-Business Suite EBS, and has a CVSS score of 9.8 Critical. Per the vendor advisory, the vulnerabili...

⚡ Weekly Recap: Oracle 0-Day, BitLocker Bypass, VMScape, WhatsApp Worm & More

The cyber world never hits pause, and staying alert matters more than ever. Every week brings new tricks, smarter attacks, and fresh lessons from the field. This recap cuts through the noise to share what really matters—key trends, warning signs, and stories shaping today's security landscape...

Zimbra Zero-Day Exploited to Target Brazilian Military via Malicious ICS Files

A now patched security vulnerability in Zimbra Collaboration was exploited as a zero-day earlier this year in cyber attacks targeting the Brazilian military. Tracked as CVE-2025-27915 CVSS score: 5.4, the vulnerability is a stored cross-site scripting XSS vulnerability in the Classic Web Client...

PT-2025-40895

Critical zero-day vulnerability in Oracle E-Business Suite. Vuln info at SecAlerts: CVE-2021-61882, CVSS 9.8: https://t.co/l5AXE99mx6 ciso cio cto vulnerabilities cybersecurity secalerts msp mssp CVE202561882 oracle https://t.co/HuEuydSF3C...

CVE-2025-11201

creationtimestamp| type| source ---|---|--- 2025-10-03 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-931/ 2025-10-29 22:15:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4ehvtzlhv2b 2025-11-07 16:45:21+00:00| seen|...

CVE-2025-11202

creationtimestamp| type| source ---|---|--- 2025-10-03 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-930/ 2025-10-29 22:25:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4eihqy7i32q...

$20 YoLink IoT Gateway Vulnerabilities Put Home Security at Risk

Four critical zero-day flaws found in the $20 YoLink Smart Hub allow remote physical access, threatening your home security. See the urgent steps you must take now...

MALF: A Multi-Agent LLM Framework for Intelligent Fuzzing of Industrial Control Protocols

Industrial control systems ICS are vital to modern infrastructure but increasingly vulnerable to cybersecurity threats, particularly through weaknesses in their communication protocols. This paper presents MALF Multi-Agent LLM Fuzzing Framework, an advanced fuzzing solution that integrates large...