Pro-Russian Hacktivist Group Attacking Government Portals, Financial Services and Online Commerce
15
Oct
2025

Pro-Russian Hacktivist Group Attacking Government Portals, Financial Services and Online Commerce

A sophisticated campaign orchestrated by multiple hacktivist groups has emerged, targeting government portals, financial services, and online commerce platforms across…

Microsoft IIS Exploit Allows Unauthenticated Attackers to Run Arbitrary Code
15
Oct
2025

Microsoft IIS Exploit Allows Unauthenticated Attackers to Run Arbitrary Code

A serious security flaw has been discovered in Microsoft’s Internet Information Services (IIS) that lets attackers run arbitrary code without…

Two New Windows Zero-Days Exploited in the Wild — One Affects Every Version Ever Shipped
15
Oct
2025

Two New Windows Zero-Days Exploited in the Wild — One Affects Every Version Ever Shipped

Microsoft on Tuesday released fixes for a whopping 183 security flaws spanning its products, including three vulnerabilities that have come…

Critical Veeam Backup RCE Flaws Allow Remote Execution of Malicious Code
15
Oct
2025

Critical Veeam Backup RCE Flaws Allow Remote Execution of Malicious Code

Veeam has released an urgent security patch to address multiple critical remote code execution (RCE) vulnerabilities in Veeam Backup &…

Microsoft patches three zero-days actively exploited by attackers
15
Oct
2025

Microsoft patches three zero-days actively exploited by attackers

On October 2025 Patch Tuesday, Microsoft released fixes for 175+ vulnerabilities, including three zero-days under active attack: CVE-2025-24990, CVE-2025-59230, and…

Dreamforce 2025: Benioff vaunts Slack as interface to agentic enterprise
15
Oct
2025

Dreamforce 2025: Benioff vaunts Slack as interface to agentic enterprise

Marc Benioff, chairman and CEO of Salesforce, told attendees of the software supplier’s Dreamforce conference in San Francisco that enterprise…

SAP NetWeaver zero-day allegedly exploited by an initial access broker
15
Oct
2025

SAP fixed maximum-severity bug in NetWeaver

SAP fixed maximum-severity bug in NetWeaver Pierluigi Paganini October 15, 2025 SAP addressed 13 new flaws, including a maximum severity vulnerability…

Windows Agere Modem Driver 0-Day Vulnerabilities Actively Exploited To Escalate Privileges
15
Oct
2025

Windows Agere Modem Driver 0-Day Vulnerabilities Actively Exploited To Escalate Privileges

Microsoft has disclosed two critical zero-day vulnerabilities in the Agere Modem driver bundled with Windows operating systems, confirming active exploitation…

When Face Recognition Doesn’t Know Your Face Is a Face
15
Oct
2025

When Face Recognition Doesn’t Know Your Face Is a Face

“If you don’t include people with disabilities or people with facial differences in the development of these processes, no one’s…

FortiPAM & FortiSwitch Manager Flaw Allows Attackers to Bypass Authentication
15
Oct
2025

FortiPAM & FortiSwitch Manager Flaw Allows Attackers to Bypass Authentication

Fortinet has disclosed a critical security vulnerability affecting FortiPAM and FortiSwitchManager products that could enable attackers to bypass authentication mechanisms…

U.S. seizes $15 billion in Bitcoin linked to massive forced-labor crypto scam
15
Oct
2025

U.S. seizes $15 billion in Bitcoin linked to massive forced-labor crypto scam

The U.S. government has seized about $15 billion worth of Bitcoin connected to what prosecutors call one of the largest…

Adobe Security Update
15
Oct
2025

Adobe Security Update Fixes Critical CVE-2025-49553 Bug

Adobe has issued a set of security updates addressing more than 35 vulnerabilities across its product portfolio. These updates include…