Cyber alerts

1,014 results

December 2025

Published Thursday 11 December 2025 (01:08) (updated 15 December 2025)

Google Releases Security Update for Chrome

Security update addresses one exploited high severity vulnerability and two medium severity vulnerabilities in Google Chrome

CC-4726 Medium

Published Wednesday 10 December 2025 (01:42) (updated 10 December 2025)

Ivanti Releases Critical Security Updates for Endpoint Manager

1 critical and 3 high severity vulnerabilities could allow a remote unauthenticated attacker to perform remote code execution in the context of an administrator session.

CC-4725 Medium

Published Wednesday 10 December 2025 (01:39) (updated 10 December 2025)

Microsoft Releases December 2025 Security Updates

Scheduled updates for Microsoft products address 57 vulnerabilities, of which 1 is under exploitation and 2 have been reported as publicly disclosed

CC-4724 Medium

Published Wednesday 10 December 2025 (12:24) (updated 16 December 2025)

Fortinet Releases Security Advisory for FortiCloud SSO Login Authentication Bypass

The security advisory address two vulnerabilities that could allow an attacker to bypass the FortiCloud SSO login authentication via a crafted SAML message

CC-4723 High

Published Thursday 4 December 2025 (01:43) (updated 5 December 2025)

Critical Vulnerabilities in React and Next.js

An attacker could exploit CVE-2025-55182 to perform remote code execution. CVE-2025-55182 affects React and dependent React frameworks such as Next.js.

November 2025

CC-4721 Medium

Published Monday 24 November 2025 (02:43) (updated 24 November 2025)

Exploited Vulnerability in Oracle Fusion Identity Manager

A critical vulnerability could allow an unauthenticated attacker to takeover Oracle Identity Manager

CC-4720 Medium

Published Wednesday 19 November 2025 (12:54) (updated 19 November 2025)

Exploitation of Fortinet FortiWeb Vulnerability CVE-2025-58034

Advisory addresses a vulnerability that could allow an authenticated attacker to perform remote code execution via crafted HTTP requests or CLI commands

CC-4719 Medium

Published Tuesday 18 November 2025 (03:25) (updated 20 November 2025)

Proof-of-Concept Exploit Reported for CVE-2025-11001 in 7-Zip

Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code

CC-4718 Medium

Published Tuesday 18 November 2025 (11:02) (updated 18 November 2025)

Google Releases Security Update for Chrome

Security update addresses an exploited high severity vulnerability in Google Chrome

CC-4717 Medium

Published Friday 14 November 2025 (01:42) (updated 21 November 2025)

Fortinet FortiWeb Path Traversal Vulnerability Under Zero-Day Exploitation

Security researchers have observed mass exploitation of CVE-2025-64446 in the wild.