Cyber Newsroom Feed

The "Cyber Newsroom Feed" module is a live feed of the latest cyber news enriched with CVE and vulnerability data. The feed is updated every 5 minutes and includes the latest news from the cyber security industry. The feed is designed to provide users with a comprehensive overview of the latest cyber security news and trends.

  • BleepingComputer
Fortinet warns of auth bypass zero-day exploited to hijack firewalls

Attackers are exploiting a new authentication bypass zero-day vulnerability in FortiOS and FortiProxy to hijack Fortinet firewalls and breach enterprise networks. This security flaw (tracked as CVE-20 ... Read more

Published Date: Jan 14, 2025 (3 months, 4 weeks ago)
  • Cybersecurity News
Active Exploitation of CVE-2024-55591 (CVSS 9.6): FortiOS and FortiProxy Under Threat

A critical vulnerability identified as CVE-2024-55591 (CVSS 9.6) is actively being exploited in the wild, posing a severe risk to Fortinet’s FortiOS and FortiProxy products. This authentication bypass ... Read more

Published Date: Jan 14, 2025 (3 months, 4 weeks ago)
  • security.nl
SAP waarschuwt voor twee kritieke kwetsbaarheden in NetWeaver

Het Duitse softwarebedrijf SAP waarschuwt klanten voor twee kritieke kwetsbaarheden in NetWeaver waardoor een aanvaller toegang tot systemen en afgeschermde informatie kan krijgen. Er zijn beveiliging ... Read more

Published Date: Jan 14, 2025 (3 months, 4 weeks ago)
  • TheCyberThrone
CVE-2024-12398 impacts Zyxel Devices

CVE-2024-12398 is a critical vulnerability discovered in the web management interface of certain Zyxel devices. This vulnerability allows an authenticated user with limited privileges to escalate thei ... Read more

Published Date: Jan 14, 2025 (3 months, 4 weeks ago)
  • 0patch.com
Micropatches Released for Windows "LDAPNightmare" Denial of Service Vulnerability (CVE-2024-49113)

December 2024 Windows Updates brought a patch for CVE-2024-49113 a.k.a. "LDAPNightmare", a denial of service vulnerability in Windows LDAP client code. The vulnerability allows an attacker to crash th ... Read more

Published Date: Jan 14, 2025 (3 months, 4 weeks ago)
  • Cybersecurity News
Critical SAP Flaws Revealed: CVE-2025-0070 and CVE-2025-0066 with CVSS 9.9 Demand Immediate Action

Today, SAP released 14 new security notes during its monthly Security Patch Day. This release includes several critical and high-severity vulnerabilities affecting core SAP systems such as NetWeaver, ... Read more

Published Date: Jan 14, 2025 (3 months, 4 weeks ago)
  • Help Net Security
What 2024 taught us about security vulnerabilties

From zero-day exploits to weaknesses in widely used software and hardware, the vulnerabilities uncovered last year underscore threat actors’ tactics and the critical gaps in organizational defenses. T ... Read more

Published Date: Jan 14, 2025 (4 months ago)
  • The Hacker News
CISA Adds Second BeyondTrust Flaw to KEV Catalog Amid Active Attacks

Vulnerability / Cybersecurity The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a second security flaw impacting BeyondTrust Privileged Remote Access (PRA) and Remote Su ... Read more

Published Date: Jan 14, 2025 (4 months ago)
  • Cybersecurity News
Linux Kernel Privilege Escalation Vulnerability (CVE-2024-27397) Exploited: PoC Released

Security researcher liona24 has provided an in-depth analysis and a proof-of-concept (PoC) exploit code for CVE-2024-27397, a vulnerability in the Linux kernel’s netfilter nf_tables component. This us ... Read more

Published Date: Jan 14, 2025 (4 months ago)
  • Cybersecurity News
Zyxel Urges Patch Application for Privilege Escalation Vulnerability (CVE-2024-12398)

Zyxel has issued an advisory for a newly identified security vulnerability, CVE-2024-12398, that affects multiple access points (AP) and security routers. With a CVSS score of 8.8, this vulnerability ... Read more

Published Date: Jan 14, 2025 (4 months ago)

Filters

Showing 10 of 5078 Results
© cvefeed.io
Latest DB Update: May. 14, 2025 5:02