CVEFeed Newsroom – Latest Cybersecurity Updates
The "Cyber Newsroom Feed" module is a live feed of the latest cyber news enriched with CVE and vulnerability data. The feed is updated every 10 minutes and includes the latest news from the cyber security industry. The feed is designed to provide users with a comprehensive overview of the latest cyber security news and trends.
-
CybersecurityNews
CISA Warns of Trend Micro Apex One OS Command Injection Vulnerability Exploited in Attacks
CISA has issued a critical warning regarding a high-severity OS command injection vulnerability in Trend Micro Apex One Management Console that threat actors are actively exploiting in the wild. The v ...
-
CybersecurityNews
Threat Actors Abuse Microsoft Help Index File to Execute PipeMagic Malware
Cybersecurity researchers have uncovered a sophisticated malware campaign exploiting Microsoft Help Index Files (.mshi) to deliver the notorious PipeMagic backdoor, marking a significant evolution in ...
-
Daily CyberSecurity
Apple’s New iOS 26 Feature Extends Battery Life, But at a Cost
In iOS 26, Apple has introduced a new power mode called Adaptive Power, designed to apply different energy-saving strategies depending on usage scenarios, with the ultimate goal of extending the iPhon ...
-
Daily CyberSecurity
CVE-2025-55205: Critical Flaw in Capsule Kubernetes Exposes Clusters to Cross-Tenant Attacks
A newly disclosed vulnerability in the Capsule Kubernetes multi-tenancy framework exposes organizations to privilege escalation and cross-tenant attacks. Tracked as CVE-2025-55205 with a CVSS score of ...
-
seclists.org
SEC Consult SA-20250728-0 :: Stored Cross-Site-Scripting in Optimizely Episerver CMS
Full Disclosure mailing list archives SEC Consult SA-20250728-0 :: Stored Cross-Site-Scripting in Optimizely Episerver CMS From: SEC Consult Vulnerability Lab via Fulldisclosure <fulldisclosure () sec ...
-
seclists.org
SEC Consult SA-20250807-0 :: Race Condition in Shopware Voucher Submission
Full Disclosure mailing list archives SEC Consult SA-20250807-0 :: Race Condition in Shopware Voucher Submission From: SEC Consult Vulnerability Lab via Fulldisclosure <fulldisclosure () seclists org> ...
-
seclists.org
Piciorgros TMO-100: Unauthorized configuration change via TFTP (CVE-2025-29617)
Full Disclosure mailing list archives From: Georg Lukas <lukas () rt-solutions de> Date: Thu, 14 Aug 2025 15:27:20 +0000 <PDF advisory: https://rt-solutions.de/piciorgros/Piciorgros_TMO-100_TFTP_en.pd ...
-
Daily CyberSecurity
CISA Flags Actively Exploited Trend Micro Apex One Vulnerability (CVE-2025-54948)
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical Trend Micro Apex One vulnerability—CVE-2025-54948—to its Known Exploited Vulnerabilities (KEV) Catalog, citing evi ...
-
Daily CyberSecurity
PipeMagic Returns: Kaspersky Uncovers Evolving Backdoor Linked to CVE-2025-29824 Exploits
Kaspersky Labs has released a new report shedding light on the persistent threat posed by PipeMagic, a sophisticated backdoor that has resurfaced in recent attacks against organizations in Saudi Arabi ...
-
The Cyber Express
New HTTP/2 DoS Vulnerability Prompts Vendor and Project Fixes
A new HTTP/2 denial of service (DoS) vulnerability that circumvents mitigations put in place after 2023’s “Rapid Reset” vulnerability is largely being addressed by affected vendors and projects, thank ...