161 reports
In late September 2025, Cisco disclosed multiple high-risk vulnerabilities affecting core networking and perimeter security products, with confirmed in-the-wild exploitation reported for several…
CVE-2025-0283 was disclosed alongside CVE-2025-0282 and described by NVD as a stack-based buffer overflow leading to local privilege escalation.
Public reporting indicates China-linked threat actors compromised multiple U.S. broadband/telecommunications providers, including AT&T, Verizon, and Lumen, with access potentially extending to…
Secrets leaked via compromised CI components GitHub Actions, CI/CD, Supply chain compromise, Secrets exposure, DevSecOps, CVE-2025-30066, CVE-2025-30154, tj-actions, reviewdog, Software supply…
On 19 November 2024, reporting indicated that financial software provider Finastra was investigating an alleged data breach involving its secure file transfer capability used for transmitting…
Microsoft has released its December Patch Tuesday security updates, addressing 71 vulnerabilities across its product ecosystem. The release includes 16 Critical-rated flaws and one actively…
Note on timing: Public reporting and official disclosures indicate the intrusion began in February 2024 , while October 2024 is significant because Change Healthcare informed HHS OCR that ~ 100…
CVE-2024-38094 is a Microsoft SharePoint Server remote code execution (RCE) vulnerability rooted in unsafe deserialisation (CWE-502) and scored 7.2 (High) under CVSS v3.1 by Microsoft. ( NVD ) It…
CVE-2024-47575 is a critical “missing authentication for a critical function” vulnerability (CWE-306) in Fortinet FortiManager and FortiManager Cloud that can enable unauthenticated remote…
Cisco is investigating a recent data breach after a threat actor known as "IntelBroker" claimed to have stolen sensitive data from the company's internal repositories and has listed it for sale on…
Ivanti's Cloud Services Appliance (CSA) has become a prime target for nation-state actors exploiting zero-day vulnerabilities to gain unauthorised access to critical infrastructure. Fortinet’s…
Ivanti recently disclosed three newly identified zero-day vulnerabilities in its Cloud Services Appliance (CSA), all of which are actively exploited in the wild. These vulnerabilities, tracked as…
