Redis
public
–
4 min read
Redis disclosed CVE-2025-49844 (RediShell), a critical CVSS 10.0 vulnerability in its in-memory database software, allowing authenticated attackers to exploit…
Fortra
public
–
3 min read
Fortra’s GoAnywhere Managed File Transfer (MFT) was exploited via CVE-2025-10035, a critical zero-day deserialization vulnerability (CVSS 10.0) in…
Unity Technologies
public
–
3 min read
A critical vulnerability (CVE-2025-59489) was disclosed in the Unity engine, the world’s most widely used game development platform, exposing…
Jaguar Land Rover (JLR)
public
–
4 min read
Jaguar Land Rover (JLR) suffered a devastating cyber attack in 2025 that brought the company to a complete standstill for…
Linux Foundation (or any enterprise using vulnerable Sudo versions 1.9.14–1.9.17)
public
–
2 min read
A critical local privilege escalation vulnerability (CVE-2025-32463) in the Sudo binary (versions 1.9.14–1.9.17) exposes enterprises…
QNAP Systems
public
–
3 min read
QNAP Systems disclosed CVE-2025-57714, a critical unquoted search path vulnerability in its NetBak Replicator 4.5.x backup software for…
Johnson Controls
public
–
4 min read
Johnson Controls, a critical infrastructure provider, faced severe exposure of its industrial control systems (ICS) due to unpatched vulnerabilities and…
Unnamed Manufacturing Firm (Q1 2025 Breach)
public
–
4 min read
In Q1 2025, an unnamed manufacturing company fell victim to a domain-based cyber attack where threat actors exploited a typosquatted…
DrayTek
public
–
2 min read
DrayTek, a manufacturer of networking hardware, disclosed a critical security vulnerability (CVE-2025-10547) in multiple Vigor router models, allowing remote, unauthenticated…
Collins Aerospace
public
–
3 min read
Collins Aerospace, a critical supplier in the aerospace and defense industry, fell victim to a ransomware attack that disrupted European…
Harrods
public
–
3 min read
Harrods, the iconic British luxury department store, confirmed a data breach affecting ~430,000 customer records after a third-party provider’…
Western Digital
public
–
3 min read
Western Digital disclosed a critical remote code execution (RCE) vulnerability (CVE-2025-30247) in the firmware of its My Cloud NAS devices,…