ProxyCommand Panic: CVE-2025-61984 Lets Attackers Hijack SSH Clients
A newly discovered vulnerability in OpenSSH's ProxyCommand feature, identified as CVE-2025-61984, allows remote attackers to execute arbitrary code on client systems.…
A newly discovered vulnerability in OpenSSH's ProxyCommand feature, identified as CVE-2025-61984, allows remote attackers to execute arbitrary code on client systems.…
Executive Summary A critical vulnerability in Microsoft-SharePoint-Server (tracked as CVE-2025-53770 and part of the “ToolShell” chain) has been actively exploited…
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning regarding a high-severity privilege escalation vulnerability in Windows Server…
The Cybersecurity and Infrastructure Security Agency (CISA) has added a critical security flaw affecting Adobe Experience Manager (AEM) to its…
Executive Summary RondoDox is an emerging, multivector botnet that has been observed weaponizing 56 distinct vulnerabilities across 30+ device and…
In the ever-evolving landscape of cybersecurity, staying ahead of emerging threats is paramount. This October, Microsoft's Patch Tuesday addressed a…
The second Tuesday of the month has arrived, and so has another major round of Microsoft security updates. For October…
Executive Summary A critical deserialization vulnerability in Fortra GoAnywhere MFT (CVE-2025-10035 , with a CVSS score of 10.0) has been…
WatchGuard has issued urgent security updates to address a critical vulnerability, CVE-2025-9242, affecting its Firebox firewalls. This high-severity flaw could allow…
A critical vulnerability has been identified in Fortra's GoAnywhere Managed File Transfer (MFT) platform, posing a significant risk to organizations…