74Articles
8Categories
2025-05-02Date
🚨
CISA Adds Two Known Exploited Vulnerabilities to CatalogCISA has added two new vulnerabilities to its  Known Exploited Vulnerabilities Catalog , based on evidence of active exploitation. CVE-2025-34028 Commvault Command Center Path Traversal Vulnerability CVE-2024-58136 Yiiframework Yii Improper Protection of Alternate Path Vulne…
KEV
🐛
NVIDIA TensorRT-LLM Vulnerability Let Hackers Run Malicious Code
🐛
CISA Issues Alert on Actively Exploited Apache HTTP Server Escape Vulnerability
KEV
⚠️
Cybersecurity News Roundup: Book Deals, Retail Attacks, Apple Spyware Alerts, and More
⚠️
Microsoft makes all new accounts passwordless by default
⚠️
In Other News: NullPoint Source Code Leak, $17,500 for iPhone Flaw, BreachForums Down
⚠️
The Have I Been Pwned Alpine Grand Tour
⚠️
How to Automate CVE and Vulnerability Advisory Response with Tines
⚠️
Seven Malicious Packages Exploit Gmail SMTP to Run Harmful Commands
⚠️
CISA Issues New ICS Advisories Addressing Critical Vulnerabilities and Exploits
⚠️
Mehr Assets – mehr Angriffsfläche – mehr Risiko
KEV
⚠️
What is EDR? An analytical approach to endpoint security
⚠️
Neurohacks to outsmart stress and make better cybersecurity decisions
⚠️
CISOs should re-consider using Microsoft RDP due to password flaw, says expert
⚠️
CrushFTP’s 10-Day Delay: A Hacker’s Dream?
📢
NCSC Guidance on “Advanced Cryptography”
📢
Google Chrome security advisory (AV25-243)
📢
VMware security advisory (AV25-242)
📢
[Control systems] ABB security advisory (AV25-241)
📢
Mozilla security advisory (AV25-240)
📢
Apache Tomcat security advisory (AV25-239)
📢
[Control systems] CISA ICS security advisories (AV25–238)
📢
Ubuntu security advisory (AV25-237)
📢
IBM security advisory (AV25-236)
📢
Dell security advisory (AV25-235)
📢
HPE security advisory (AV25-234)
📢
Microsoft Edge security advisory (AV25-233)
📢
Erlang security advisory (AV25-232)
📢
SonicWall security advisory (AV25-231)
📢
HPE security advisory (AV25-230)
📢
Cisco security advisory (AV25-229)
📢
GitLab security advisory (AV25-228)
📢
Google Chrome security advisory (AV25-227)
📢
HPE security advisory (AV25-226)
📢
[Control systems] CISA ICS security advisories (AV25–225)
📢
Dell security advisory (AV25-224)
📢
IBM security advisory (AV25-223)
📢
Microsoft Edge security advisory (AV25-222)
📢
Red Hat security advisory (AV25-221)
📢
Ubuntu security advisory (AV25-220)
📢
Cyber Centre welcomes round 2 of NIST’s additional digital signature scheme standardization process
📢
UK NCSC: Cyberattacks impacting UK retailers are a wake-up call
📢
TikTok fined €530 million for sending European user data to China
📢
TikTok Slammed With €530 Million GDPR Fine for Sending E.U. Data to China
📢
Dutch Services Disrupted by DDoS Attacks From Russian-Affiliated Hacktivists
🔥
US indicts Black Kingdom ransomware admin for Microsoft Exchange attacks
🔥
UK Retailers Co-op, Harrods and M&S Struggle With Cyberattacks
🔥
Nova Scotia Power Says Hackers Stole Customer Information
🔥
Ukrainian Nefilim Ransomware Affiliate Extradited to US
🕵️
Raytheon, Nightwing to Pay $8.4 Million in Settlement Over Cybersecurity Failures
🕵️
RSA Conference 2025 Announcement Summary (Day 3)
🕵️
Microsoft Accounts Go Passwordless by Default
🕵️
ISC Stormcast For Friday, May 2nd, 2025 https://isc.sans.edu/podcastdetail/9434, (Fri, May 2nd)
🕵️
Your KnowBe4 Fresh Content Updates from April 2025
🕵️
Disney Hacker Admits Guilt After Stealing 1.1TB of Internal Data
🕵️
Strategien für eine sichere digitale Zukunft von der RSA
🕵️
Microsoft ernennt Deputy-CISO für Europa
🕵️
Your Data Won’t Survive the Next Global Cyber War
🕵️
Off-Topic Friday
🕵️
A Flaw With the Security Level Slider in Tor Browser
🕵️
A Flaw With the Security Level Slider in Tor Browser
🕵️
A Flaw With the Security Level Slider in Tor Browser
🕵️
Friday Squid Blogging: Pyjama Squid
🕵️
Privacy for Agentic AI
🕵️
Weekly Update 450
🕵️
How NSA Can Spy on Air-Gapped Networks? Meet FIREWALK
🌐
MintsLoader Drops GhostWeaver via Phishing, ClickFix — Uses DGA, TLS for Stealth Attacks
🌐
Why Cybersecurity Experts Always Go Back to Basics 🔒
📡
Recommended contract clauses for security operations centre procurement (ITSM.00.500)
📡
Microsoft fixes Exchange Online bug flagging Gmail emails as spam
📡
xAI Dev Leaks API Key for Private SpaceX, Tesla LLMs
📡
Microsoft Sets Passkeys Default for New Accounts; 15 Billion Users Gain Passwordless Support
📡
Dating app Raw exposed users’ location data and personal information
📡
RSAC 2025 wrap-up – Week in security with Tony Anscombe