Cyber alerts

3,009 results

November 2025

CC-4719 Medium

Published Tuesday 18 November 2025 (03:25) (updated 20 November 2025)

Proof-of-Concept Exploit Reported for CVE-2025-11001 in 7-Zip

Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code

CC-4718 Medium

Published Tuesday 18 November 2025 (11:02) (updated 18 November 2025)

Google Releases Security Update for Chrome

Security update addresses an exploited high severity vulnerability in Google Chrome

CC-4717 Medium

Published Friday 14 November 2025 (01:42) (updated 21 November 2025)

Fortinet FortiWeb Path Traversal Vulnerability Under Zero-Day Exploitation

Security researchers have observed mass exploitation of CVE-2025-64446 in the wild.

CC-4716 Medium

Published Thursday 13 November 2025 (03:01) (updated 17 November 2025)

Exploitation of WatchGuard Firebox OS Vulnerability CVE-2025-9242

Advisory addresses a critical vulnerability that could allow a remote unauthenticated attacker to execute arbitrary code

CC-4715 Medium

Published Wednesday 12 November 2025 (04:02) (updated 12 November 2025)

Microsoft Releases November 2025 Security Updates

Scheduled updates for Microsoft products address 63 vulnerabilities, of which 1 is under exploitation.

CC-4714 Medium

Published Monday 10 November 2025 (01:14) (updated 10 November 2025)

QNAP Releases Security Updates for QTS and QuTS Hero

When chained together, the vulnerabilities could allow for unauthenticated remote code execution and full device takeover

CC-4713 Medium

Published Thursday 6 November 2025 (01:51) (updated 6 November 2025)

Cisco Releases Security Updates for Unified CCX

Two critical vulnerabilities could allow for RCE and authentication bypass in Unified Contact Center Express

October 2025

CC-4712 Medium

Published Wednesday 29 October 2025 (01:38) (updated 29 October 2025)

Apache Releases Security Updates

Proof-of-concept exploit code has been shared publicly for CVE-2025-55752, which could lead to RCE

CC-4711 High

Published Friday 24 October 2025 (11:27) (updated 27 October 2025)

Microsoft Releases Out-of-Band Security Update for Windows Server Update Service (WSUS)

CVE-2025-59287 is under active exploitation and could lead to unauthenticated remote code execution over a network

CC-4710 Medium

Published Thursday 23 October 2025 (11:34) (updated 23 October 2025)

Oracle Releases Security Advisory to Address Two Critical Severity Vulnerabilities in E-Business Suite

Oracle has released a quarterly rollup security advisory addressing CVE-2025-53072 and CVE-2025-62481, which, if successfully exploited, could lead to unauthenticated takeover of Oracle Marketing