CISA Adds TP-Link and WhatsApp Flaws to KEV Catalog Amid Active Exploitation
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical security vulnerability, CVE-2020-24363 (CVSS score: 8.8), affecting TP-Link ...
Friday, October 24, 2025
Tag: Flaws
⚡ Weekly Recap: Password Manager Flaws, Apple 0-Day, Hidden AI Prompts, In-the-Wild Exploits & More
Cybersecurity today is influenced by global politics, where a single breach can disrupt supply chains and alter power dynamics. Leaders ...
Security Flaws In Carmaker's Web Portal Let a Hacker Remotely Unlock Cars
Three years after discovering a vulnerability in Jacuzzi's SmartTub interface, security researcher Eaton Zveare revealed flaws in a major carmaker's ...
CISA Adds Two N-able N-central Flaws to Known Exploited Vulnerabilities Catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two security vulnerabilities affecting N-able N-central to its Known Exploited ...
Security flaws in a carmaker’s web portal let one hacker remotely unlock cars from anywhere
Security researcher Eaton Zveare informed TechCrunch about vulnerabilities in a carmaker's centralized dealer portal that allowed extensive access to customer ...
CyberArk and HashiCorp Flaws Enable Remote Vault Takeover Without Credentials
Cybersecurity researchers have identified 14 vulnerabilities, collectively named Vault Fault, in enterprise secure vaults from CyberArk and HashiCorp. If exploited, ...
CISA Adds 3 D-Link Router Flaws to KEV Catalog After Active Exploitation Reports
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added three significant security vulnerabilities in D-Link routers to its Known ...
Storm-2603 Exploits SharePoint Flaws to Deploy Warlock Ransomware on Unpatched Systems
Microsoft has identified that the threat actor Storm-2603 is exploiting SharePoint vulnerabilities to deploy Warlock ransomware on targeted systems. This ...
CISA Warns: SysAid Flaws Under Active Attack Enable Remote File Access and SSRF
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has included two vulnerabilities in SysAid IT support software in its Known ...
CISA Orders Urgent Patching After Chinese Hackers Exploit SharePoint Flaws in Live Attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two Microsoft SharePoint vulnerabilities, CVE-2025-49704 and CVE-2025-49706, to its Known ...
News Summarized. Time Saved. Bite-sized news briefs for busy people. No fluff, just facts.