CVEFeed Newsroom – Latest Cybersecurity Updates
The "Cyber Newsroom Feed" module is a live feed of the latest cyber news enriched with CVE and vulnerability data. The feed is updated every 5 minutes and includes the latest news from the cyber security industry. The feed is designed to provide users with a comprehensive overview of the latest cyber security news and trends.
-
Daily CyberSecurity
SHADOW-VOID-042 Impersonates Trend Micro in Phishing Campaign to Breach Critical Infrastructure
A sophisticated threat group turned a cybersecurity giant’s reputation against itself, launching a targeted spear-phishing campaign that impersonated Trend Micro to breach defense, energy, and chemica ...
-
Daily CyberSecurity
Critical Plesk Flaw (CVE-2025-66430) Risks Full Server Takeover via LPE and Apache Config Injection
A critical security vulnerability has been discovered in Plesk, a leading web hosting and data center automation platform, potentially handing full server control to unauthorized users. Tracked as CVE ...
-
Daily CyberSecurity
Apache StreamPark Flaw Risks Data Decryption & Token Forgery via Hard-Coded Key and AES ECB Mode
The maintainers of Apache StreamPark, a popular framework for developing streaming applications, have issued a critical security advisory after discovering fundamental flaws in how the platform handle ...
-
Daily CyberSecurity
ImageMagick Flaw Risks Arbitrary Memory Disclosure via PSX TIM File Integer Overflow on 32-bit Systems
A high-severity vulnerability has been uncovered in ImageMagick, the ubiquitous open-source image processing suite used by millions of websites and applications. The flaw, tracked as CVE-2025-66628 (C ...
-
CybersecurityNews
Cybersecurity News Weekly Newsletter – Windows, Chrome, and Apple 0-days, Kali Linux 2025.4, and MITRE Top 25
As 2025 nears its close, the cybersecurity landscape shows no signs of slowing down. This week’s developments highlight how rapidly the threat environment continues to evolve with major zero-day vulne ...
-
CybersecurityNews
CISA Warns of Windows Cloud Files Mini Filter 0-Day Vulnerability Exploited in Attacks
A critical alert regarding an active zero-day vulnerability affecting the Microsoft Windows Cloud Files Mini Filter Driver. The vulnerability poses a significant risk to organizations running affected ...
-
security.nl
Apple dicht lek gebruikt bij 'zeer geraffineerde' aanval tegen iPhone-gebruikers
Apple heeft beveiligingsupdates uitgebracht voor twee kwetsbaarheden die zijn gebruikt bij 'zeer geraffineerde' aanvallen tegen de iPhones van bepaalde individuen. Wat de aanvallen geraffineerd maakt ...
-
CybersecurityNews
Google Warns Multiple Hacker Groups Are Exploiting React2Shell to Spread Malware
Google Threat Intelligence Group (GTIG) has issued a warning regarding the widespread exploitation of a critical security flaw in React Server Components. Known as React2Shell (CVE-2025-55182), this v ...
-
TheCyberThrone
CISA adds Chrome ans Sierra Bugs to KEV Catalog
CISA has added two high‑impact vulnerabilities—CVE‑2025‑14174 in Google Chromium and CVE‑2018‑4063 in Sierra Wireless AirLink ALEOS—to the Known Exploited Vulnerabilities (KEV) catalog after confirmin ...
-
CybersecurityNews
CISA Warns of Google Chromium 0-Day Vulnerability Exploited in Attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical zero-day vulnerability in Google Chromium’s ANGLE graphics engine to its Known Exploited Vulnerabilities (KEV) cat ...