Fortinet
13
Aug
2025

Fortinet warns of FortiSIEM pre-auth RCE flaw with exploit in the wild

Fortinet is warning about a remote unauthenticated command injection flaw in FortiSIEM that has in-the-wild exploit code, making it critical for…

CISA Added WinRaR Zero-Day (CVE-2025-8088) Vulnerability That is Actively Exploited In the Wild
13
Aug
2025

CISA Added WinRaR Zero-Day (CVE-2025-8088) Vulnerability That is Actively Exploited In the Wild

The U.S. Cybersecurity and Infrastructure Security Agency has added this vulnerability to its Known Exploited Vulnerabilities catalog, with a due…

Infamous XZ Backdoor Found Hidden in Docker Images for Over a Year
13
Aug
2025

Infamous XZ Backdoor Found Hidden in Docker Images for Over a Year

Security researchers at Binarly have discovered that the sophisticated supply chain hack still exists in publicly accessible Docker images on…

Fortinet SIEM issue coincides with spike in brute-force traffic against company’s SSL VPNs
13
Aug
2025

Fortinet SIEM issue coincides with spike in brute-force traffic against company’s SSL VPNs

Fortinet warned customers in an advisory Tuesday of a critical vulnerability in FortiSIEM, its security information and event management software,…

Windows 11
13
Aug
2025

Windows 11 24H2 updates failing again with 0x80240069 errors

The KB5063878 Windows 11 24H2 cumulative update, released earlier this week, fails to install on some systems according to widespread…

Emerging AI-Driven Phishing Trends Reshape Cybercrime Tactics
13
Aug
2025

Emerging AI-Driven Phishing Trends Reshape Cybercrime Tactics

Artificial intelligence (AI) in advances and adaptive social engineering techniques have led to a significant revolution in phishing and scams…

The overlooked changes that two Trump executive orders could bring to cybersecurity
13
Aug
2025

The overlooked changes that two Trump executive orders could bring to cybersecurity

Two executive orders President Donald Trump has signed in recent months could prove to have a more dramatic impact on…

Microsoft
13
Aug
2025

New downgrade attack can bypass FIDO auth in Microsoft Entra ID

Security researchers have created a new FIDO downgrade attack against Microsoft Entra ID that tricks users into authenticating with weaker login…

Google’s Android pKVM Framework Achieves SESIP Level 5 Certification
13
Aug
2025

Google’s Android pKVM Framework Achieves SESIP Level 5 Certification

Google has revealed that protected KVM (pKVM), the hypervisor that powers the Android Virtualization Framework (AVF), has achieved SESIP Level…

Fortinet FortiWeb flaw CVE-2025-25257 exploited hours after PoC release
13
Aug
2025

Critical FortiSIEM flaw under active exploitation, Fortinet warns

Critical FortiSIEM flaw under active exploitation, Fortinet warns Pierluigi Paganini August 13, 2025 Fortinet warns of a critical FortiSIEM vulnerability,…

Black Hat USA 2025 – AI, Innovation, and the Power of the Cybersecurity Community
13
Aug
2025

Black Hat USA 2025 – AI, Innovation, and the Power of the Cybersecurity Community

By Gary Miliefsky, Publisher of Cyber Defense Magazine Black Hat, the cybersecurity industry’s most established and in-depth security event series,…

Data Brokers Face New Pressure for Hiding Opt-Out Pages From Google
13
Aug
2025

Data Brokers Face New Pressure for Hiding Opt-Out Pages From Google

United States senator Maggie Hassan is pressing major data brokers after an investigation by The Markup/CalMatters and copublished by WIRED…