Cyber alerts

Published Thursday 19 June 2025 (02:51) (updated 19 June 2025)

BeyondTrust Releases Security Advisory for Remote Support & Privileged Remote Access

A critical vulnerability in BeyondTrust remote access tools could lead to code injection

Published Wednesday 18 June 2025 (04:29) (updated 19 June 2025)

Proof-of-Concept Exploit Released for Pre-Auth RCE Chain in Sitecore Experience Platform

Security researchers have released a technical writeup which, with minimal modification, serves as a proof-of-concept exploit that could allow unauthenticated remote attackers to execute arbitrary code 

Published Tuesday 17 June 2025 (04:13) (updated 18 July 2025)

Citrix Releases Critical Security Updates for NetScaler ADC and NetScaler Gateway

Exploitation could allow attackers to read memory from NetScaler Gateway or AAA virtual server, potentially exposing sensitive information such as session tokens. CVE-2025-5777 is similar to CitrixBleed (CVE-2023-4966).  

Published Thursday 26 June 2025 (04:06) (updated 18 July 2025)

Active Exploitation of Zero-Day Vulnerability CVE-2025-6543 in NetScaler ADC and NetScaler Gateway

Citrix has released a security advisory to address exploited vulnerability CVE-2025-6543 that could lead to unintended control flow or a denial-of-service condition.

Published Tuesday 1 July 2025 (11:01) (updated 1 July 2025)

Google Releases Security Updates for Chrome

Security update addresses an exploited high severity vulnerability in Google Chrome where an attacker could perform perform arbitrary read/write

Published Wednesday 9 July 2025 (01:57) (updated 9 July 2025)

Microsoft Releases July 2025 Security Updates

Scheduled updates for Microsoft products, including security updates for 130 vulnerabilities, of which one has been reported as publicly disclosed

Published Friday 11 July 2025 (11:33) (updated 11 July 2025)

Active Exploitation of Critical Vulnerability in Wing FTP Server

CVE-2025-47812 could lead to unauthenticated remote code execution

Published Wednesday 16 July 2025 (10:43) (updated 16 July 2025)

Broadcom Releases Security Updates for VMware ESXi, Workstation, Fusion, and Tools

Critical advisory addresses four security vulnerabilities that could result in code execution or information disclosure

Published Friday 18 July 2025 (01:22) (updated 18 July 2025)

Google Releases Security Update for Chrome

Security update addresses an exploited high severity vulnerability in Google Chrome

Published Monday 21 July 2025 (03:47) (updated 21 July 2025)

Exploitation of CrushFTP Vulnerability CVE-2025-54309

Exploitation of this critical vulnerability could allow a remote attacker to obtain admin access via HTTPS