Fortinet
public
–
3 min read
A critical path traversal vulnerability (CVE pending) in Fortinet’s FortiWeb web application firewall (WAF) is being actively exploited globally,…
Samsung
public
–
3 min read
Samsung addressed a critical path traversal vulnerability (CVE-2025-4632) in its MagicINFO 9 Server, exploited to propagate the Mirai botnet. The…
Fortinet
public
–
3 min read
Fortinet silently patched a **zero-day vulnerability** in its **FortiWeb Web Application Firewall (WAF)**, versions 7.0.7 and 7.2.…
Palo Alto Networks
public
–
3 min read
A critical denial-of-service (DoS) vulnerability (CVE-TBD) in Palo Alto Networks’ PAN-OS allows unauthenticated attackers to remotely reboot firewalls by sending…
Fortinet
public
–
2 min read
Fortinet faced criticism for silently patching **two zero-day vulnerabilities** in its **FortiWeb web application firewall (WAF)** without adequately informing customers.…
Meta
public
–
2 min read
Cybersecurity researchers at Oligo Security discovered a series of critical **Remote Code Execution (RCE) vulnerabilities** in Meta’s AI inference…
Cisco
public
–
4 min read
CISA issued an emergency directive ordering US federal agencies to urgently patch two actively exploited zero-day vulnerabilities (CVE-2025-20333 and CVE-2025-20362)…
GlobalLogic
public
–
1 min read
In October, GlobalLogic fell victim to a cyberattack where threat actors exploited a zero-day vulnerability in Oracle E-Business Suite. The…
GitLab
public
–
5 min read
GitLab disclosed nine vulnerabilities across its Community (CE) and Enterprise (EE) editions, with CVE-2025-6945 being the most critical—a prompt-injection…
NPM (Node Package Manager) ecosystem (affected projects using `expr-eval` library)
public
–
3 min read
A critical Remote Code Execution (RCE) vulnerability (CVE pending) was discovered in the widely used JavaScript library `expr-eval` (versions <…
IBM
public
–
2 min read
The incident involves a 403 Forbidden error on an IBM web page, indicating unauthorized access or a misconfigured security restriction.…
Elastic
public
–
3 min read
Elastic disclosed a critical vulnerability (CVE-2025-37735) in Elastic Defend for Windows, stemming from improper file permission preservation in its SYSTEM-privileged…