Cyber alerts Severity Medium (1,241) Medium (1,241) Low (1,018) Low (1,018) Information only (558) Information only (558) High (102) High (102) Year 2026 (60) 2026 (60) 2025 (135) 2025 (135) 2024 (169) 2024 (169) 2023 (187) 2023 (187) 2022 (232) 2022 (232) 2021 (289) 2021 (289) 2020 (362) 2020 (362) 2019 (461) 2019 (461) 2018 (661) 2018 (661) 2017 (438) 2017 (438) Threat type Vulnerability (1,140) Vulnerability (1,140) Insecure software (1,011) Insecure software (1,011) Malware (740) Malware (740) Attack methodology (89) Attack methodology (89) Intelligence (8) Intelligence (8) Attack Methodology (2) Attack Methodology (2) 2,994 results Loading... December 2025 CC-4724 Medium Published Wednesday 10 December 2025 (12:24) (updated 16 December 2025) Fortinet Releases Security Advisory for FortiCloud SSO Login Authentication Bypass The security advisory address two vulnerabilities that could allow an attacker to bypass the FortiCloud SSO login authentication via a crafted SAML message CC-4723 High Published Thursday 4 December 2025 (01:43) (updated 5 December 2025) Critical Vulnerabilities in React and Next.js An attacker could exploit CVE-2025-55182 to perform remote code execution. CVE-2025-55182 affects React and dependent React frameworks such as Next.js. November 2025 CC-4722 Medium Published Wednesday 26 November 2025 (04:27) (updated 26 November 2025) SHA1-Hulud Supply Chain Attack Affecting npm Packages A supply chain campaign dubbed "Shai Hulud 2.0" and "Sha1 Hulud: The Second Coming" affecting hundreds of npm packages CC-4721 Medium Published Monday 24 November 2025 (02:43) (updated 24 November 2025) Exploited Vulnerability in Oracle Fusion Identity Manager A critical vulnerability could allow an unauthenticated attacker to takeover Oracle Identity Manager CC-4720 Medium Published Wednesday 19 November 2025 (12:54) (updated 19 November 2025) Exploitation of Fortinet FortiWeb Vulnerability CVE-2025-58034 Advisory addresses a vulnerability that could allow an authenticated attacker to perform remote code execution via crafted HTTP requests or CLI commands CC-4719 Medium Published Tuesday 18 November 2025 (03:25) (updated 20 November 2025) Proof-of-Concept Exploit Reported for CVE-2025-11001 in 7-Zip Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code CC-4718 Medium Published Tuesday 18 November 2025 (11:02) (updated 18 November 2025) Google Releases Security Update for Chrome Security update addresses an exploited high severity vulnerability in Google Chrome CC-4717 Medium Published Friday 14 November 2025 (01:42) (updated 21 November 2025) Fortinet FortiWeb Path Traversal Vulnerability Under Zero-Day Exploitation Security researchers have observed mass exploitation of CVE-2025-64446 in the wild. CC-4716 Medium Published Thursday 13 November 2025 (03:01) (updated 17 November 2025) Exploitation of WatchGuard Firebox OS Vulnerability CVE-2025-9242 Advisory addresses a critical vulnerability that could allow a remote unauthenticated attacker to execute arbitrary code CC-4715 Medium Published Wednesday 12 November 2025 (04:02) (updated 12 November 2025) Microsoft Releases November 2025 Security Updates Scheduled updates for Microsoft products address 63 vulnerabilities, of which 1 is under exploitation. 1 2 3 4 5 6 7 8 9 10
CC-4724 Medium Published Wednesday 10 December 2025 (12:24) (updated 16 December 2025) Fortinet Releases Security Advisory for FortiCloud SSO Login Authentication Bypass The security advisory address two vulnerabilities that could allow an attacker to bypass the FortiCloud SSO login authentication via a crafted SAML message
CC-4723 High Published Thursday 4 December 2025 (01:43) (updated 5 December 2025) Critical Vulnerabilities in React and Next.js An attacker could exploit CVE-2025-55182 to perform remote code execution. CVE-2025-55182 affects React and dependent React frameworks such as Next.js.
CC-4722 Medium Published Wednesday 26 November 2025 (04:27) (updated 26 November 2025) SHA1-Hulud Supply Chain Attack Affecting npm Packages A supply chain campaign dubbed "Shai Hulud 2.0" and "Sha1 Hulud: The Second Coming" affecting hundreds of npm packages
CC-4721 Medium Published Monday 24 November 2025 (02:43) (updated 24 November 2025) Exploited Vulnerability in Oracle Fusion Identity Manager A critical vulnerability could allow an unauthenticated attacker to takeover Oracle Identity Manager
CC-4720 Medium Published Wednesday 19 November 2025 (12:54) (updated 19 November 2025) Exploitation of Fortinet FortiWeb Vulnerability CVE-2025-58034 Advisory addresses a vulnerability that could allow an authenticated attacker to perform remote code execution via crafted HTTP requests or CLI commands
CC-4719 Medium Published Tuesday 18 November 2025 (03:25) (updated 20 November 2025) Proof-of-Concept Exploit Reported for CVE-2025-11001 in 7-Zip Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code
CC-4718 Medium Published Tuesday 18 November 2025 (11:02) (updated 18 November 2025) Google Releases Security Update for Chrome Security update addresses an exploited high severity vulnerability in Google Chrome
CC-4717 Medium Published Friday 14 November 2025 (01:42) (updated 21 November 2025) Fortinet FortiWeb Path Traversal Vulnerability Under Zero-Day Exploitation Security researchers have observed mass exploitation of CVE-2025-64446 in the wild.
CC-4716 Medium Published Thursday 13 November 2025 (03:01) (updated 17 November 2025) Exploitation of WatchGuard Firebox OS Vulnerability CVE-2025-9242 Advisory addresses a critical vulnerability that could allow a remote unauthenticated attacker to execute arbitrary code
CC-4715 Medium Published Wednesday 12 November 2025 (04:02) (updated 12 November 2025) Microsoft Releases November 2025 Security Updates Scheduled updates for Microsoft products address 63 vulnerabilities, of which 1 is under exploitation.