Cyber alerts

Published Wednesday 13 August 2025 (02:29) (updated 19 August 2025)

Microsoft Releases August 2025 Security Updates

Scheduled updates for Microsoft products, including security updates for 111 vulnerabilities, of which one has been reported as publicly disclosed

Published Thursday 21 August 2025 (03:00) (updated 21 August 2025)

Commvault Releases Security Updates to Address Multiple Vulnerabilities

Security researchers have demonstrated that 4 vulnerabilities in Commvault can be exploited in a chain to achieve unauthenticated remote code execution

Published Tuesday 26 August 2025 (03:29) (updated 26 August 2025)

Critical Vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway Under Active Exploitation

Advisory addresses three vulnerabilities that could allow for unauthenticated remote code execution, unauthorised access to the management interface, and denial-of-service. Citrix has observed exploitation of CVE-2025-7775 in the wild.

Published Wednesday 27 August 2025 (01:59) (updated 27 August 2025)

Exploitation of Git Vulnerability CVE-2025-48384

Successful exploitation could allow a remote attacker to execute arbitrary code upon cloning a Git repository

Published Monday 8 September 2025 (11:42) (updated 8 September 2025)

Exploitation of CVE-2025-42957 in SAP S/4HANA

Successful exploitation could allow a remote attacker with user privileges to inject ABAP code into the system

Published Wednesday 10 September 2025 (10:13) (updated 10 September 2025)

Microsoft Releases September 2025 Security Updates

Scheduled updates for Microsoft products address 81 vulnerabilities, of which two have been reported as publicly disclosed

Published Wednesday 10 September 2025 (11:11) (updated 10 September 2025)

Ivanti Releases September 2025 Security Updates

Updates address vulnerabilities in Connect Secure, Policy Secure, ZTA Gateways, and Neurons for Secure Access

Published Thursday 18 September 2025 (01:26) (updated 18 September 2025)

Google Releases Security Update for Chrome

Security update addresses an exploited high severity vulnerability in Google Chrome

Published Thursday 25 September 2025 (11:59) (updated 25 September 2025)

Active Exploitation of Zero-Day Vulnerability CVE-2025-20352 in Cisco IOS and IOS XE

Cisco has released a security advisory to address exploited vulnerability CVE-2025-20352 that could lead to remote code execution or a denial-of-service condition

Published Monday 22 September 2025 (02:48) (updated 26 September 2025)

Fortra Releases Security Update for GoAnywhere MFT

Security update addresses a critical severity vulnerability in Fortra's GoAnywhere MFT License Servlet