Google fixes sixth actively exploited Chrome zero-day this year

Google released emergency security updates to address an actively exploited Chrome zero-day vulnerability. Google has released emergency security updates to address a high-severity zero-day vulnerability vulnerability, tracked as CVE-2024-4761, in the Chrome browser. The vulnerability is an out-of-bounds write issue that resides in the V8 JavaScript engine of the Google web browser. The company confirmed […]

100+ Cisco Secure Email Devices Exposed to Zero‑Day Exploited in the Wild

itsecuritynews.info - 21/12/2025 05:02

Security researchers have identified at least 120 Cisco Secure Email Gateway and Cisco Secure Email and Web Manager devices vulnerable to a critical...

100+ Cisco Secure Email Devices Exposed to Zero‑Day Exploited in the Wild

itsecuritynews.info - 21/12/2025 05:02

Security researchers have identified at least 120 Cisco Secure Email Gateway and Cisco Secure Email and Web Manager devices vulnerable to a critical...

High-severity MongoDB flaw CVE-2025-14847 could lead to server takeover

itsecuritynews.info - 25/12/2025 11:02

MongoDB addressed a high-severity vulnerability that can be exploited to achieve remote code execution on vulnerable servers. MongoDB addressed a...

High-severity MongoDB flaw CVE-2025-14847 could lead to server takeover

itsecuritynews.info - 25/12/2025 11:02

MongoDB addressed a high-severity vulnerability that can be exploited to achieve remote code execution on vulnerable servers. MongoDB addressed a...

Five-year-old Fortinet FortiOS SSL VPN vulnerability actively exploited

securityaffairs.co - 25/12/2025 19:40

Fortinet reported active exploitation of a five-year-old FortiOS SSL VPN flaw, abused in the wild under specific configurations. Fortinet researchers...

Five-year-old Fortinet FortiOS SSL VPN vulnerability actively exploited

securityaffairs.co - 25/12/2025 19:40

Fortinet reported active exploitation of a five-year-old FortiOS SSL VPN flaw, abused in the wild under specific configurations. Fortinet researchers...

CISA Flags Actively Exploited Digiever NVR Vulnerability Allowing Remote Code Execution

itsecuritynews.info - 25/12/2025 09:02

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a security flaw impacting Digiever DS-2105 Pro network video recorders (NVRs)...

CISA Flags Actively Exploited Digiever NVR Vulnerability Allowing Remote Code Execution

itsecuritynews.info - 25/12/2025 09:02

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a security flaw impacting Digiever DS-2105 Pro network video recorders (NVRs)...

U.S. CISA adds a flaw in MongoDB Server to its Known Exploited Vulnerabilities catalog

securityaffairs.co - 30/12/2025 08:33

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a MongoDB Server flaw to its Known Exploited Vulnerabilities catalog. The U.S....

CVE-2025-40602: SonicWall SMA1000 Zero-Day Bug

thecyberthrone.in - 19/12/2025 02:44

SonicWall SMA 1000 and SMA 100 series appliances face a critical local privilege escalation vulnerability, CVE-2025-40602, actively exploited in the...

Rubriques :

Google fixes sixth actively exploited Chrome zero-day this year

Articles similaires

100+ Cisco Secure Email Devices Exposed to Zero‑Day Exploited in the Wild

100+ Cisco Secure Email Devices Exposed to Zero‑Day Exploited in the Wild

High-severity MongoDB flaw CVE-2025-14847 could lead to server takeover

High-severity MongoDB flaw CVE-2025-14847 could lead to server takeover

Five-year-old Fortinet FortiOS SSL VPN vulnerability actively exploited

Five-year-old Fortinet FortiOS SSL VPN vulnerability actively exploited

CISA Flags Actively Exploited Digiever NVR Vulnerability Allowing Remote Code Execution

CISA Flags Actively Exploited Digiever NVR Vulnerability Allowing Remote Code Execution

U.S. CISA adds a flaw in MongoDB Server to its Known Exploited Vulnerabilities catalog

CVE-2025-40602: SonicWall SMA1000 Zero-Day Bug

Les derniers communiqués