CVEFeed Newsroom – Latest Cybersecurity Updates
The "Cyber Newsroom Feed" module is a live feed of the latest cyber news enriched with CVE and vulnerability data. The feed is updated every 5 minutes and includes the latest news from the cyber security industry. The feed is designed to provide users with a comprehensive overview of the latest cyber security news and trends.
-
CrowdStrike.com
Preventing Container Escape Attempts with Falcon Cloud Security's Enhanced Runtime Capabilities
Container escape represents one of the most significant security threats in modern cloud computing environments. This allows attackers to break free from container isolation mechanisms, potentially le ... Read more
-
CrowdStrike.com
CrowdStrike Falcon Prevents Supply Chain Attack Involving Compromised NPM Packages
Recently, five popular NPM (Node Package Manager) packages were compromised and modified to deliver a malicious DLL, dubbed “Scavenger”. The malware pushed via these compromised NPM packages executes ... Read more
-
TheCyberThrone
CVE-2025-54136 affects Vibe Coding tool Cursor
August 6, 2025A critical code execution vulnerability, tagged as CVE-2025-54136 (also dubbed “MCPoison”), was found in the Cursor AI-powered code editor. This vulnerability is particularly dangerous f ... Read more
-
Daily CyberSecurity
Critical RCE Flaw (CVE-2025-54594) in React Native Bottom Tabs’ GitHub Actions Exposed Secrets
A critical vulnerability—CVE-2025-54594 (CVSS 9.1)—has been identified in the React Native Bottom Tabs project, exposing the repository to arbitrary code execution and secret exfiltration through a mi ... Read more
-
Daily CyberSecurity
Adobe AEM Forms Patch: Critical Flaws (CVE-2025-54253, CVSS 10.0) Allow RCE & Arbitrary File Read, Public PoCs Available
Adobe has released urgent patches for two critical vulnerabilities affecting Adobe Experience Manager (AEM) Forms on JEE, versions 6.5.23.0 and earlier. The flaws — tracked as CVE-2025-54253 and CVE-2 ... Read more
-
Daily CyberSecurity
The Fake Crypto Bot Scam: How Smart Contracts & AI Videos Are Stealing Millions on YouTube
SentinelLABS has detailed a coordinated wave of cryptocurrency scams weaponizing malicious smart contracts promoted as arbitrage trading bots — all orchestrated through aged YouTube accounts and AI-ge ... Read more
-
Daily CyberSecurity
Critical HFS 2.x Flaw (CVE-2024-23692) Actively Exploited: Legacy File Server Becomes a Ransomware Backdoor
The Imperva Threat Research team sounded the alarm on a coordinated exploitation campaign targeting outdated instances of Rejetto HTTP File Server (HFS) 2.x. The attackers, leveraging a critical serve ... Read more
-
Daily CyberSecurity
High-Severity Flaws in Rockwell Arena Simulation Expose Industrial Systems to Memory Abuse
Rockwell Automation has issued a security advisory addressing three memory abuse vulnerabilities in its Arena Simulation software, a widely used tool for discrete event simulation in manufacturing, lo ... Read more
-
Daily CyberSecurity
Critical Command Injection Flaws in Trend Micro Apex One Actively Exploited
Trend Micro has issued an urgent advisory for two critical command injection vulnerabilities affecting its Apex One (on-prem) management console for Windows. Both vulnerabilities—CVE-2025-54948 and CV ... Read more
-
BleepingComputer
Adobe issues emergency fixes for AEM Forms zero-days after PoCs released
Adobe released emergency updates for two zero-day flaws in Adobe Experience Manager (AEM) Forms on JEE after a PoC exploit chain was disclosed that can be used for unauthenticated, remote code executi ... Read more