CVEFeed Newsroom – Latest Cybersecurity Updates
The "Cyber Newsroom Feed" module is a live feed of the latest cyber news enriched with CVE and vulnerability data. The feed is updated every 10 minutes and includes the latest news from the cyber security industry. The feed is designed to provide users with a comprehensive overview of the latest cyber security news and trends.
-
Daily CyberSecurity
Critical Node-SAML Flaw (CVE-2025-54369) Exposes SAML 2.0 to Authentication Bypass
A critical vulnerability has been discovered in the popular open-source Node.js library Node-SAML, used to implement SAML 2.0 authentication workflows. Tracked as CVE-2025-54369 and scoring a CVSS v4 ...
-
Daily CyberSecurity
Singapore’s Critical Infrastructure Under Attack by China-Linked UNC3886 APT
The OT Cybersecurity Information Sharing and Analysis Center (OT-ISAC) has released a threat alert detailing an ongoing and highly coordinated cyber-espionage campaign by the China-linked APT group UN ...
-
Trend Micro
Revisiting UNC3886 Tactics to Defend Against Present Risk
Key Takeaways UNC3886 is an APT group that has historically targeted critical infrastructure, including telecommunications, government, technology, and defense, with a recent attack against Singapore. ...
-
CybersecurityNews
Weekly Cybersecurity News Recap : Sharepoint 0-day, Vmware Exploitation, Threats and Cyber Attacks
Welcome to this week’s Cybersecurity Recap. We’re looking at important updates from July 21-27, 2025, in the world of digital threats and defenses. This week has seen significant developments that hig ...
-
Help Net Security
Week in review: Microsoft SharePoint servers under attack, landing your first cybersecurity job
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Microsoft pins on-prem SharePoint attacks on Chinese threat actors As Microsoft continues to update it ...
-
BleepingComputer
Post SMTP plugin flaw exposes 200K WordPress sites to hijacking attacks
More than 200,000 WordPress websites are using a vulnerable version of the Post SMTP plugin that allows hackers to take control of the administrator account. Post SMTP is a popular email delivery plug ...
-
The Register
Blame a leak for Microsoft SharePoint attacks, researcher insists
A week after Microsoft told the world that its July software updates didn't fully fix a couple of bugs, which allowed miscreants to take over on-premises SharePoint servers and remotely execute code, ...
-
Daily CyberSecurity
EU Cloud Providers Sue Commission Over Broadcom-VMware Deal, Allege Unfair Competition
The Cloud Infrastructure Services Providers in Europe (CISPE), an industry alliance representing European sovereign cloud infrastructure providers, has filed a legal complaint with the General Court o ...
-
Daily CyberSecurity
NVIDIA Update: 14 Vulnerabilities Patched in GPU Drivers & vGPU Software
NVIDIA has released software security updates for its GPU Display Drivers and vGPU software across Windows, Linux, and virtualized environments, addressing a total of 14 vulnerabilities, some of which ...
-
Zero Day Initiative
CVE-2025-20281: Cisco ISE API Unauthenticated Remote Code Execution Vulnerability
On January 25th, 2025, the Trend Zero Day Initiative (ZDI) received a report from Kentaro Kawane of GMO Cybersecurity by Ierae regarding a deserialization of untrusted data vulnerability in Cisco Iden ...