TP-Link Network Video Recorder Vulnerability Let Attackers Execute Arbitrary Commands

TP-Link Network Video Recorder Vulnerability Let Attackers Execute Arbitrary Commands Two high-severity vulnerabilities in TP-Link VIGI network video recorder (NVR) systems could allow attackers to execute arbitrary commands on affected devices. The security flaws, identified as CVE-20 … Read more Published Date: Jul 24, 2025 (2 hours, 34 minutes ago) Vulnerabilities has been mentioned in this article. […]

SharePoint 0-day Vulnerability Exploited in Wild by All Sorts of Hacker Groups

SharePoint 0-day Vulnerability Exploited in Wild by All Sorts of Hacker Groups A critical zero-day vulnerability in Microsoft SharePoint servers has become a playground for threat actors across the cybercriminal spectrum, with attacks ranging from opportunistic hackers to sophis … Read more Published Date: Jul 24, 2025 (2 hours, 42 minutes ago) Vulnerabilities has been mentioned in […]

Critical Mitel Flaw Lets Hackers Bypass Login, Gain Full Access to MiVoice MX-ONE Systems

Critical Mitel Flaw Lets Hackers Bypass Login, Gain Full Access to MiVoice MX-ONE Systems Jul 24, 2025Ravie LakshmananVulnerability / Network Security Mitel has released security updates to address a critical security flaw in MiVoice MX-ONE that could allow an attacker to bypass authenti … Read more Published Date: Jul 24, 2025 (2 hours, 51 minutes ago) Vulnerabilities […]

Fire Ant Exploits VMware Flaws to Compromise ESXi Hosts and vCenter Environments

Fire Ant Exploits VMware Flaws to Compromise ESXi Hosts and vCenter Environments Jul 24, 2025Ravie LakshmananVirtualization / Network Security Virtualization and networking infrastructure have been targeted by a threat actor codenamed Fire Ant as part of a prolonged cyber espion … Read more Published Date: Jul 24, 2025 (3 hours ago) Vulnerabilities has been mentioned in […]

Micropatches Released for Windows Disk Cleanup Tool Elevation of Privilege Vulnerability (CVE-2025-21420)

Micropatches Released for Windows Disk Cleanup Tool Elevation of Privilege Vulnerability (CVE-2025-21420) February 2025 Windows Updates brought a patch for CVE-2025-21420, a local privilege elevation vulnerability allowing a local attacker to execute malicious code in another user’s existing session using … Read more Published Date: Jul 24, 2025 (3 hours, 26 minutes ago) Vulnerabilities has been mentioned […]

Storm-2603 spotted deploying ransomware on exploited SharePoint servers

Storm-2603 spotted deploying ransomware on exploited SharePoint servers One of the groups that, in the past few weeks, has been exploiting vulnerabilities in on-prem SharePoint installation has been observed deploying Warlock ransomware, Microsoft shared on Wednesday. Fir … Read more Published Date: Jul 24, 2025 (2 hours, 15 minutes ago) Vulnerabilities has been mentioned in this article. […]

Mitel warns of critical MiVoice MX-ONE authentication bypass flaw

Mitel warns of critical MiVoice MX-ONE authentication bypass flaw Mitel Networks has released security updates to patch a critical-severity authentication bypass vulnerability impacting its MiVoice MX-ONE enterprise communications platform. MX-ONE is the company’s S … Read more Published Date: Jul 24, 2025 (2 hours, 42 minutes ago) Vulnerabilities has been mentioned in this article.

Sophos and SonicWall Patch Critical RCE Flaws Affecting Firewalls and SMA 100 Devices

Sophos and SonicWall Patch Critical RCE Flaws Affecting Firewalls and SMA 100 Devices Jul 24, 2025Ravie LakshmananNetwork Security / Vulnerability Sophos and SonicWall have alerted users of critical security flaws in Sophos Firewall and Secure Mobile Access (SMA) 100 Series appliance … Read more Published Date: Jul 24, 2025 (3 hours, 45 minutes ago) Vulnerabilities has been […]

Storm-2603 Exploiting SharePoint Flaws

Storm-2603 Exploiting SharePoint Flaws July 24, 2025OverviewStorm-2603 is a China-based advanced threat actor actively exploiting a series of critical vulnerabilities in on-premises Microsoft SharePoint servers since mid-2025. Their attack … Read more Published Date: Jul 24, 2025 (2 hours, 1 minute ago) Vulnerabilities has been mentioned in this article.

Splunk Details on How to Detect, Mitigate and Respond to CitrixBleed 2 Attack

Splunk Details on How to Detect, Mitigate and Respond to CitrixBleed 2 Attack CitrixBleed 2 (CVE-2025-5777) erupted in 2025 when researchers uncovered an out-of-bounds read in Citrix NetScaler ADC and Gateway that lets an unauthenticated request siphon memory straight from the … Read more Published Date: Jul 24, 2025 (2 hours, 36 minutes ago) Vulnerabilities has been […]