Security News

New OpenSSH Flaws Enable Man-in-the-Middle and DoS Attacks — Patch Now
2025-02-18 15:34

Two security vulnerabilities have been discovered in the OpenSSH secure networking utility suite that, if successfully exploited, could result in an active machine-in-the-middle (MitM) and a...

SonicWall firewalls now under attack: Patch ASAP or risk intrusion via your SSL VPN
2025-02-14 22:53

Roses are red, violets are blue, CVE-2024-53704 is perfect for a ransomware crew Miscreants are actively abusing a high-severity authentication bypass bug in unpatched internet-facing SonicWall...

Patch Tuesday: Microsoft Patches Two Actively Exploited Zero-Day Flaws
2025-02-12 20:25

February’s report on Microsoft patches includes 56 vulnerabilities, two of which are zero-day flaws that have been exploited.

Microsoft’s Patch Tuesday Fixes 63 Flaws, Including Two Under Active Exploitation
2025-02-12 09:38

Microsoft on Tuesday released fixes for 63 security flaws impacting its software products, including two vulnerabilities that it said has come under active exploitation in the wild. Of the 63...

February's Patch Tuesday sees Microsoft offer just 63 fixes
2025-02-12 02:58

Don't relax just yet: Redmond has made some certificate-handling changes that could trip unprepared admins Patch Tuesday Microsoft’s February patch collection is mercifully smaller than January’s...

Microsoft February 2025 Patch Tuesday fixes 4 zero-days, 55 flaws
2025-02-11 18:56

Today is Microsoft's February 2025 Patch Tuesday, which includes security updates for 55 flaws, including four zero-day vulnerabilities, with two actively exploited in attacks. [...]

SonicWall firewall exploit lets hackers hijack VPN sessions, patch now
2025-02-11 15:56

Security researchers at Bishop Fox have published complete exploitation details for the CVE-2024-53704 vulnerability that allows bypassing the authentication mechanism in certain versions of the...

February 2025 Patch Tuesday forecast: New directions for AI development
2025-02-10 06:00

The new year has started with a whirlwind of activity, and one of the hottest topics in the news is the increasing emphasis on AI. DeepSeek ad Stargate DeepSeek took the world by storm as millions...

CISA orders agencies to patch Linux kernel bug exploited in attacks
2025-02-05 18:58

​CISA has ordered federal agencies to secure their systems within three weeks against a high-severity Linux kernel flaw actively exploited in attacks. [...]

Zyxel won’t patch newly exploited flaws in end-of-life routers
2025-02-04 21:22

Zyxel has issued a security advisory about actively exploited flaws in CPE Series devices, warning that it has no plans to issue fixing patches and urging users to move to actively supported models. [...]