CVEFeed Newsroom – Latest Cybersecurity Updates
The "Cyber Newsroom Feed" module is a live feed of the latest cyber news enriched with CVE and vulnerability data. The feed is updated every 10 minutes and includes the latest news from the cyber security industry. The feed is designed to provide users with a comprehensive overview of the latest cyber security news and trends.
-
CybersecurityNews
CISA Warns of Zimbra Collaboration Suite Vulnerability Exploited in Attacks
CISA Warns Zimbra Collaboration Suite Vulnerability Exploit CISA has added a high-severity vulnerability affecting the Zimbra Collaboration Suite (ZCS) to its Known Exploited Vulnerabilities (KEV) cat ...
-
Help Net Security
DarkSword: Researchers uncover another iOS exploit kit
A powerful iPhone hacking toolkit dubbed “DarkSword” has been used since November 2025 to compromise devices by exploiting zero-day iOS vulnerabilities, Google researchers have shared. iOS vulnerabili ...
-
Daily CyberSecurity
Critical Jenkins Flaws Expose CI/CD Servers to Remote Code Execution
The Jenkins project has released a critical security advisory addressing multiple vulnerabilities that could lead to full system compromise. The advisory highlights two high-severity flaws in the Jenk ...
-
The Hacker News
ThreatsDay Bulletin: FortiGate RaaS, Citrix Exploits, MCP Abuse, LiveChat Phish & More
ThreatsDay Bulletin is back on The Hacker News, and this week feels off in a familiar way. Nothing loud, nothing breaking everything at once. Just a lot of small things that shouldn’t work anymore but ...
-
Daily CyberSecurity
High-Severity RCE Flaw in Atlassian Bamboo Threatens CI/CD Environments
Atlassian has sounded the alarm for users of its Bamboo Data Center, uncovering a high-severity Remote Code Execution (RCE) vulnerability that could allow attackers to seize control of development env ...
-
CybersecurityNews
Critical Ubiquiti UniFi Vulnerabilities Allow Attackers to Seize Full Control of Underlying Systems
Ubiquiti UniFi Vulnerabilities Ubiquiti has disclosed two critical-to-high severity vulnerabilities in its widely deployed UniFi Network Application, including a maximum-severity flaw that could allow ...
-
TheCyberThrone
The Exploit That Arrived in an Email and Left With Your Data
The Distinction Nobody Makes Clearly EnoughWhen most practitioners hear “prompt injection,” they picture a user typing malicious instructions directly into a chatbot. “Ignore previous instructions. Re ...
-
Daily CyberSecurity
Invisible Ink: Critical 9.6 CVSS jsPDF Flaw Turns Generated Documents into XSS Traps
A critical-severity vulnerability has been identified in jsPDF, the popular JavaScript library used by developers worldwide to generate PDF documents directly in the browser. The flaw, designated CVE- ...
-
Daily CyberSecurity
AI Workflows Under Fire: Critical RCE and File Write Flaws Expose Langflow Servers
Security researchers have identified two severe vulnerabilities in Langflow, the popular visual framework for building AI-powered agents. The flaws, which include a “Critical” rated unauthenticated Re ...
-
Daily CyberSecurity
CISA Issues Urgent Warning Following Global Cyberattack on Stryker
In a move to protect the nation’s critical infrastructure, the Cybersecurity and Infrastructure Security Agency (CISA) has issued an alert following a significant cyberattack on Stryker Corporation, a ...