Cyber alerts

2,997 results

November 2025

CC-4717 Medium

Published Friday 14 November 2025 (01:42) (updated 21 November 2025)

Fortinet FortiWeb Path Traversal Vulnerability Under Zero-Day Exploitation

Security researchers have observed mass exploitation of CVE-2025-64446 in the wild.

CC-4716 Medium

Published Thursday 13 November 2025 (03:01) (updated 17 November 2025)

Exploitation of WatchGuard Firebox OS Vulnerability CVE-2025-9242

Advisory addresses a critical vulnerability that could allow a remote unauthenticated attacker to execute arbitrary code

CC-4715 Medium

Published Wednesday 12 November 2025 (04:02) (updated 12 November 2025)

Microsoft Releases November 2025 Security Updates

Scheduled updates for Microsoft products address 63 vulnerabilities, of which 1 is under exploitation.

CC-4714 Medium

Published Monday 10 November 2025 (01:14) (updated 10 November 2025)

QNAP Releases Security Updates for QTS and QuTS Hero

When chained together, the vulnerabilities could allow for unauthenticated remote code execution and full device takeover

CC-4713 Medium

Published Thursday 6 November 2025 (01:51) (updated 6 November 2025)

Cisco Releases Security Updates for Unified CCX

Two critical vulnerabilities could allow for RCE and authentication bypass in Unified Contact Center Express

October 2025

CC-4712 Medium

Published Wednesday 29 October 2025 (01:38) (updated 29 October 2025)

Apache Releases Security Updates

Proof-of-concept exploit code has been shared publicly for CVE-2025-55752, which could lead to RCE

CC-4711 High

Published Friday 24 October 2025 (11:27) (updated 27 October 2025)

Microsoft Releases Out-of-Band Security Update for Windows Server Update Service (WSUS)

CVE-2025-59287 is under active exploitation and could lead to unauthenticated remote code execution over a network

CC-4710 Medium

Published Thursday 23 October 2025 (11:34) (updated 23 October 2025)

Oracle Releases Security Advisory to Address Two Critical Severity Vulnerabilities in E-Business Suite

Oracle has released a quarterly rollup security advisory addressing CVE-2025-53072 and CVE-2025-62481, which, if successfully exploited, could lead to unauthenticated takeover of Oracle Marketing

CC-4709 High

Published Wednesday 15 October 2025 (04:02) (updated 16 October 2025)

F5 Issues Statement on Compromise of Internal F5 Networks

F5 has acknowledged source code and details about undisclosed vulnerabilities have been stolen by a state-sponsored attacker, but no exploitation has been observed

CC-4708 Medium

Published Wednesday 15 October 2025 (10:36) (updated 10 November 2025)

Microsoft Releases October 2025 Security Updates

Scheduled updates for Microsoft products address 175 vulnerabilities, of which 3 are under exploitation and 3 have been reported as publicly disclosed