News

• 7 CIS Experts' 2026 Cybersecurity Predictions Fri, 31 Oct 2025 13:11:00 -0400
  What does 2026 have in store for cybersecurity? Read our experts' 2026 cybersecurity predictions to find out and get planning.

Looking Glass Cyber

Malware Patrol

SecList

• Crypto wasted: BlueNoroff’s ghost mirage of funding and jobs
  Kaspersky GReAT experts dive deep into the BlueNoroff APT's GhostCall and GhostHire campaigns. Extensive research detailing multiple malware chains targeting macOS, including a stealer suite, fake Zoom and Microsoft Teams clients and ChatGPT-enhanced images.

securingtomorrow.mcafee.com

Quick Heal

Threat Post

• Student Loan Breach Exposes 2.5M Records
• Watering Hole Attacks Push ScanBox Keylogger
• Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
• Ransomware Attacks are on the Rise
• Cybercriminals Are Selling Access to Chinese Surveillance Cameras
• Twitter Whistleblower Complaint: The TL;DR Version
• Firewall Bug Under Active Attack Triggers CISA Warning
• Fake Reservation Links Prey on Weary Travelers
• iPhone Users Urged to Update to Patch 2 Zero-Days
• Google Patches Chrome’s Fifth Zero-Day of the Year

Naked Security

Security Affairs

• U.S. CISA adds Fortinet FortiWeb flaw to its Known Exploited Vulnerabilities catalog
• Critical CVE-2025-59367 flaw lets hackers access ASUS DSL routers remotely
• Millions of sites at risk from Imunify360 critical flaw exploit
• Critical FortiWeb flaw under attack, allowing complete compromise
• Germany’s BSI issues guidelines to counter evasion attacks targeting LLMs
• Washington Post notifies 10,000 individuals affected in Oracle-linked data theft
• Chrome extension “Safery” steals Ethereum wallet seed phrases
• A new round of Europol’s Operation Endgame dismantled Rhadamanthys, Venom RAT, and Elysium botnet
• U.S. CISA adds WatchGuard Firebox, Microsoft Windows, and Gladinet Triofox flaws to its Known Exploited Vulnerabilities catalog
• Amazon alerts: advanced threat actor exploits Cisco ISE & Citrix NetScaler zero-days

Security Awareness Tips of the week

Exploits

• [webapps] Flowise 3.0.4 - Remote Code Execution (RCE)
• [webapps] Casdoor 2.95.0 - Cross-Site Request Forgery (CSRF)
• [remote] Ilevia EVE X1/X5 Server 4.7.18.0.eden - Reverse Rootshell
• [local] Microsoft Windows Server 2025 Hyper-V NT Kernel Integration VSP - Elevation of Privilege
• [remote] ClipBucket 5.5.0 - Arbitrary File Upload
• [remote] ClipBucket 5.5.2 Build #90 - Server-Side Request Forgery (SSRF)
• [webapps] Tourism Management System 2.0 - Arbitrary Shell Upload
• [webapps] Casdoor 2.55.0 - Cross-Site Request Forgery (CSRF)
• [webapps] dotCMS 25.07.02-1 - Authenticated Blind SQL Injection
• [webapps] ELEX WooCommerce WordPress Plugin 1.4.3 - SQL Injection
• [webapps] XWiki Platform 15.10.10 - Metasploit Module for Remote Code Execution (RCE)
• [webapps] Concrete CMS 9.4.3 - Stored XSS
• [local] Mbed TLS 3.6.4 - Use-After-Free
• [remote] HTTP/2 2.0 - Denial Of Service (DOS)
• [remote] HTMLDOC 1.9.13 - Stack Buffer Overflow
• [remote] GeoVision ASManager Windows Application 6.1.2.0 - Remote Code Execution (RCE)
• [local] GeoVision ASManager Windows Application 6.1.2.0 - Credentials Disclosure
• [webapps] StoryChief Wordpress Plugin 1.0.42 - Arbitrary File Upload
• [remote] Ivanti Endpoint Manager Mobile 12.5.0.0 - Authentication Bypass
• [webapps] Lingdang CRM 8.6.4.7 - SQL Injection
• [webapps] Birth Chart Compatibility WordPress Plugin 2.0 - Full Path Disclosure
• [remote] Tenda AC20 16.03.08.12 - Command Injection
• [webapps] Lantronix Provisioning Manager 7.10.3 - XML External Entity Injection (XXE)
• [webapps] Soosyze CMS 2.0 - Brute Force Login
• [remote] Microsoft Windows 10.0.19045 - NTLMv2 Hash Disclosure
• [remote] PHPMyAdmin 3.0 - Bruteforce Login Bypass
• [webapps] RiteCMS 3.0.0 - Reflected Cross Site Scripting (XSS)
• [webapps] BigAnt Office Messenger 5.6.06 - SQL Injection
• [webapps] JetBrains TeamCity 2023.11.4 - Authentication Bypass
• [webapps] ServiceNow Multiple Versions - Input Validation & Template Injection
• [webapps] Ghost CMS 5.59.1 - Arbitrary File Read
• [webapps] Ghost CMS 5.42.1 - Path Traversal
• [remote] Belkin F9K1009 F9K1010 2.00.04/2.00.09 - Hard Coded Credentials
• [webapps] VMware vSphere Client 8.0.3.0 - Reflected Cross-Site Scripting (XSS)
• [remote] Microsoft SharePoint Server 2019 (16.0.10383.20020) - Remote Code Execution (RCE)
• [remote] Tigo Energy Cloud Connect Advanced (CCA) 4.0.1 - Command Injection
• [webapps] Microsoft Edge Renderer Process (Mojo IPC) 134.0.6998.177 - Sandbox Escape
• [webapps] Grav CMS 1.7.48 - Remote Code Execution (RCE)
• [remote] Citrix NetScaler ADC/Gateway 14.1 - Memory Disclosure
• [webapps] atjiu pybbs 6.0.0 - Cross Site Scripting (XSS)
• [local] Microsoft Windows - Storage QoS Filter Driver Checker
• [webapps] projectworlds Online Admission System 1.0 - SQL Injection
• [remote] Cisco ISE 3.0 - Authorization Bypass
• [remote] Cisco ISE 3.0 - Remote Code Execution (RCE)
• [local] Microsoft Virtual Hard Disk (VHDX) 11 - Remote Code Execution (RCE)
• [webapps] Ultimate Member WordPress Plugin 2.6.6 - Privilege Escalation

Last 20 Website Defacements - Zone-h

Advisories

Symantec Packet Stoem Security