WAFinity---Infinite-Protection-Intelligent-Detection

WAFinity - Infinite Protection, Intelligent Detection WAFin...

Microsoft SharePoint Zero-Day Exploitation: What Public Sector Leaders Should Know

The Rapid7 September 2025 Threat Report highlights active exploitation of a critical Microsoft SharePoint vulnerability, CVE-2025-53770. This zero-day attack is being used by threat actors to gain initial access to victim networks, with exploitation observed in government as well as multiple othe...

⚡ Weekly Recap: Cisco 0-Day, Record DDoS, LockBit 5.0, BMC Bugs, ShadowV2 Botnet & More

Cybersecurity never stops—and neither do hackers. While you wrapped up last week, new attacks were already underway. From hidden software bugs to massive DDoS attacks and new ransomware tricks, this week's roundup gives you the biggest security moves to know. Whether you're protecting key systems...

Cisco ASA Firewall Zero-Day Exploits Deploy RayInitiator and LINE VIPER Malware

The U.K. National Cyber Security Centre NCSC has revealed that threat actors have exploited the recently disclosed security flaws impacting Cisco firewalls as part of zero-day attacks to deliver previously undocumented malware families like RayInitiator and LINE VIPER. "The RayInitiator and LINE...

Urgent: Cisco ASA Zero-Day Duo Under Attack; CISA Triggers Emergency Mitigation Directive

Cisco is urging customers to patch two security flaws impacting the VPN web server of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software, which it said have been exploited in the wild. The zero-day vulnerabilities in question are...

PT-2025-39388

⚠️ Critical Alert – CVE-2025-78901 • Zero-day in Telerik UI library actively exploited 🚨 • Affects thousands of .NET web apps 2025.3.1 • Mass scanning and ransomware attempts underway • Action: Patch immediately! CyberSecurity ZeroDay Telerik PatchNow NewTalics...

Patch Automation for Browsers with TruRisk™ Eliminate

Recently, CISA added a Chrome zero-day vulnerability, CVE-2025-10585, to its Known Exploited Vulnerabilities KEV Catalog, confirming that threat actors are actively exploiting this high-severity flaw in real-world attacks. This vulnerability affects multiple web browsers that utilize the Chromium...

CVE-2025-38562

creationtimestamp| type| source ---|---|--- 2025-09-24 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-917/ 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-08-03 05:18:00+00:00| seen|...

CVE-2025-10924

creationtimestamp| type| source ---|---|--- 2025-09-24 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-913/...

CVE-2025-10925

creationtimestamp| type| source ---|---|--- 2025-09-24 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-914/...

CVE-2025-10920

creationtimestamp| type| source ---|---|--- 2025-09-24 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-909/ 2025-10-30 09:57:13+00:00| seen| https://bsky.app/profile/basefortify.bsky.social/post/3m4fp4w3kf22h 2025-10-31 02:16:12+00:00| seen|...

CVE-2025-10921

creationtimestamp| type| source ---|---|--- 2025-09-24 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-910/ 2025-12-04 00:51:21+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3m74qx22fv22v 2025-12-13 14:08:41+00:00| seen|...

CVE-2025-8354

creationtimestamp| type| source ---|---|--- 2025-09-23 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-907/...

CVE-2025-8892

creationtimestamp| type| source ---|---|--- 2025-09-23 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-908/...

PT-2025-39214

Name of the Vulnerable Software and Affected Versions Chamilo versions prior to 1.11.34 Description Chamilo is a learning management system susceptible to a stored cross-site scripting XSS issue. An attacker with limited access, such as a trainer, can inject malicious JavaScript into the course...

PT-2025-39213

Name of the Vulnerable Software and Affected Versions Chamilo versions prior to 1.11.34 Description Chamilo is a learning management system susceptible to a stored cross-site scripting XSS issue. An attacker with a low-privileged account, such as a trainer, can inject malicious JavaScript into th...

PT-2025-39212

Name of the Vulnerable Software and Affected Versions Chamilo versions prior to 1.11.34 Description Chamilo is a learning management system. A Cross-Site Request Forgery CSRF issue allows an attacker to delete projects within a course without the victim’s consent. Sensitive actions, such as proje...

⚡ Weekly Recap: Chrome 0-Day, AI Hacking Tools, DDR5 Bit-Flips, npm Worm & More

The security landscape now moves at a pace no patch cycle can match. Attackers aren't waiting for quarterly updates or monthly fixes—they adapt within hours, blending fresh techniques with old, forgotten flaws to create new openings. A vulnerability closed yesterday can become the blueprint for...

CISA Warns of Two Malware Strains Exploiting Ivanti EPMM CVE-2025-4427 and CVE-2025-4428

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday released details of two sets of malware that were discovered in an unnamed organization's network following the exploitation of security flaws in Ivanti Endpoint Manager Mobile EPMM. "Each set contains loaders for maliciou...

Update your Chrome today: Google patches 4 vulnerabilities including one zero-day

Google has released an update for its Chrome browser to patch four security vulnerabilities, including one zero-day. A zero-day vulnerability refers to a bug that has been found and exploited by cybercriminals before the vendor even knew about it they have "zero days" to fix it. This update is...