CVEFeed Newsroom – Latest Cybersecurity Updates
The "Cyber Newsroom Feed" module is a live feed of the latest cyber news enriched with CVE and vulnerability data. The feed is updated every 5 minutes and includes the latest news from the cyber security industry. The feed is designed to provide users with a comprehensive overview of the latest cyber security news and trends.
-
CybersecurityNews
American Airlines Subsidiary Envoy Compromised in Oracle Hacking Campaign
Envoy Air, a wholly owned subsidiary of American Airlines, has confirmed it fell victim to a hacking campaign exploiting vulnerabilities in Oracle’s E-Business Suite (EBS). The breach, first highlight ...
-
TheCyberThrone
Inside the F5 BIG-IP 2025 Security Incident: Source Code Theft and Urgent Patch Release
OverviewIn October 2025, F5 Networks disclosed a significant cybersecurity incident involving a sophisticated nation-state threat actor who breached its corporate networks. This breach, detected initi ...
-
CybersecurityNews
PoC Exploit Released for 7-Zip Vulnerabilities that Let Attackers Execute Arbitrary Code Remotely
A proof-of-concept exploit for two critical vulnerabilities in the popular file archiver 7-Zip, potentially allowing attackers to execute arbitrary code remotely through malicious ZIP files. The flaws ...
-
Daily CyberSecurity
Privilege Escalation Flaw Discovered in MinIO Service Accounts — CVE-2025-62506
The developers of MinIO, a popular high-performance, S3-compatible object storage platform, have issued a critical security advisory addressing a privilege escalation vulnerability (CVE-2025-62506, CV ...
-
BleepingComputer
ConnectWise fixes Automate bug allowing AiTM update attacks
ConnectWise released a security update to address vulnerabilities, one of them with critical severity, in Automate product that could expose sensitive communications to interception and modification. ...
-
BleepingComputer
American Airlines subsidiary Envoy confirms Oracle data theft attack
Envoy Air, a regional airline carrier owned by American Airlines, confirms that data was compromised from its Oracle E-Business Suite application after the Clop extortion gang listed American Airlines ...
-
The Register
American Airlines subsidiary Envoy caught in Clop's Oracle EBS raid
Envoy Air, an American Airlines subsidiary, has confirmed that it was among the dozens of organizations compromised via Oracle E-Business Suite (EBS) security flaws, following claims by Clop extortion ...
-
TheCyberThrone
Apache ActiveMQ affected by CVE-2025-54539
October 17, 2025CVE-2025-54539 is a critical remote code execution (RCE) vulnerability in Apache ActiveMQ NMS AMQP Client, a .NET client library used to connect applications to AMQP message brokers li ...
-
The Cyber Express
Siemens ProductCERT Issues Multiple Security Advisories Highlighting Critical Vulnerabilities
Siemens ProductCERT has recently issued a series of security advisories alerting users to several critical vulnerabilities found across various Siemens industrial and automation products. One of the m ...
-
The Cyber Express
Google Patches Critical Chrome Vulnerability (CVE-2025-11756) in Safe Browsing Component
Google has issued an urgent security update for its Chrome browser, addressing a high-severity vulnerability tracked as CVE-2025-11756. This flaw, which affects Chrome’s Safe Browsing feature, could a ...