CVEFeed Newsroom – Latest Cybersecurity Updates
The "Cyber Newsroom Feed" module is a live feed of the latest cyber news enriched with CVE and vulnerability data. The feed is updated every 5 minutes and includes the latest news from the cyber security industry. The feed is designed to provide users with a comprehensive overview of the latest cyber security news and trends.
-
Daily CyberSecurity
Critical Node-SAML Flaw (CVE-2025-54419, CVSS 10.0) Allows Authentication Bypass in SAML 2.0 Web Apps
A newly disclosed critical vulnerability in Node-SAML, a widely used SAML 2.0 authentication provider for Node.js, could allow attackers to manipulate signed login responses—potentially enabling authe ... Read more
-
CrowdStrike.com
CrowdStrike Detects and Blocks Initial SharePoint Zero-Day Exploitation
Beginning on July 18, 2025, at approximately 0700 UTC, CrowdStrike Falcon® Complete Next-Gen MDR and CrowdStrike Falcon® Adversary OverWatch™ identified a wave of Microsoft SharePoint exploitation att ... Read more
-
CrowdStrike.com
Preventing Container Escape Attempts with Falcon Cloud Security's Enhanced Runtime Capabilities
Container escape represents one of the most significant security threats in modern cloud computing environments. This allows attackers to break free from container isolation mechanisms, potentially le ... Read more
-
CrowdStrike.com
CrowdStrike Falcon Prevents Supply Chain Attack Involving Compromised NPM Packages
Recently, five popular NPM (Node Package Manager) packages were compromised and modified to deliver a malicious DLL, dubbed “Scavenger”. The malware pushed via these compromised NPM packages executes ... Read more
-
Daily CyberSecurity
PyPI Warns of Sophisticated Phishing Campaign Targeting Python Developers
The Python Package Index (PyPI), the central repository for Python developers around the world, has issued a security warning regarding an ongoing phishing attack aimed at tricking project maintainers ... Read more
-
Daily CyberSecurity
QWINS LTD, The Suspected Bulletproof Hosting Provider Fueling Global Malware Campaigns
In a deep-dive into the infrastructure powering some of today’s most prevalent malware campaigns, security researcher Vasilis Orlof uncovers a suspected bulletproof hosting provider operating under th ... Read more
-
Daily CyberSecurity
Neuralink Joins “Smart Bionic Eye” Project: Elon Musk’s Company Aims to Restore Sight with AI-Powered Implants
Elon Musk’s brain–computer interface company, Neuralink, is actively expanding the horizons of its technological applications. According to the latest reports, the company has joined an ambitious rese ... Read more
-
seclists.org
KL-001-2025-016: Xorux LPAR2RRD File Upload Directory Traversal
Full Disclosure mailing list archives From: KoreLogic Disclosures via Fulldisclosure <fulldisclosure () seclists org> Date: Mon, 28 Jul 2025 18:42:21 -0500 KL-001-2025-016: Xorux LPAR2RRD File Upload ... Read more
-
seclists.org
KL-001-2025-015: Xorux LPAR2RRD Read Only User Log Download Exposing Sensitive Information
Full Disclosure mailing list archives From: KoreLogic Disclosures via Fulldisclosure <fulldisclosure () seclists org> Date: Mon, 28 Jul 2025 18:41:35 -0500 KL-001-2025-015: Xorux LPAR2RRD Read Only Us ... Read more
-
seclists.org
KL-001-2025-014: Xorux LPAR2RRD Read Only User Denial of Service
Full Disclosure mailing list archives From: KoreLogic Disclosures via Fulldisclosure <fulldisclosure () seclists org> Date: Mon, 28 Jul 2025 18:40:28 -0500 KL-001-2025-014: Xorux LPAR2RRD Read Only Us ... Read more