CVEFeed Newsroom – Latest Cybersecurity Updates
The "Cyber Newsroom Feed" module is a live feed of the latest cyber news enriched with CVE and vulnerability data. The feed is updated every 10 minutes and includes the latest news from the cyber security industry. The feed is designed to provide users with a comprehensive overview of the latest cyber security news and trends.
-
Daily CyberSecurity
No Patch, Full Exploit: CVSS 9.9 RCE & IDOR Flaws in InnoShop eCommerce Platform
Security researcher TheHiker disclosured three serious vulnerabilities in InnoShop, an open-source eCommerce system built on Laravel 12. These issues—ranging from insecure direct object references (ID ...
-
TheCyberThrone
CVE-2025-5777 – Critical Citrix NetScaler Vulnerability
CVE-2025-5777 is a critical out-of-bounds read vulnerability discovered in Citrix NetScaler ADC and NetScaler Gateway. This flaw allows unauthenticated remote attackers to access sensitive memory cont ...
-
Daily CyberSecurity
North Korean Hackers Exploit GitHub and Dropbox in Targeted Spearphishing Attacks
A new report from EnkiWhiteHat has unveiled a sophisticated cyber espionage operation that leverages GitHub private repositories, Dropbox links, and the open-source XenoRAT malware in a campaign targe ...
-
Daily CyberSecurity
Wedding Invitation Scam: SpyMax RAT Targets Indian WhatsApp Users, Stealing OTPs & Banking Credentials
Researchers at K7 Labs have uncovered a highly targeted Android spyware campaign aimed at Indian mobile users, using a seemingly innocent “Wedding Invitation” APK file shared via WhatsApp. Behind the ...
-
The Register
Typhoon-like gang slinging TLS certificate 'signed' by the Los Angeles Police Department
A stealthy, ongoing campaign to gain long-term access to networks bears all the markings of intrusions conducted by China’s ‘Typhoon’ crews and has infected at least 1,000 devices, primarily in the US ...
-
Hackread - Latest Cybersecurity, Hacking News, Tech, AI & Crypto
Salt Typhoon Targets Telecoms via Router Flaws, Warn FBI and Canada
A newly released advisory from the FBI and Canada’s Cyber Centre warns of an ongoing cyber espionage campaign by a China-linked group that is targeting telecom networks worldwide. The report, issued J ...
-
Ars Technica
Canadian telecom hacked by suspected China state group
Hackers suspected of working on behalf of the Chinese government exploited a maximum-severity vulnerability, which had received a patch 16 months earlier, to compromise a telecommunications provider i ...
-
Dark Reading
Citrix Patches Critical Vulns in NetScaler ADC and Gateway
Source: Vladimir Sotnichenko via Alamy Stock PhotoNEWS BRIEFCitrix has fixed a critical vulnerability, tracked as CVE-2025-5777, found within NetScaler ADC and NetScaler Gateway.The vulnerability, ass ...
-
cloudsecurityalliance.org
ESXi Ransomware: The Growing Threat to Virtualized Environments
Originally published by ValiCyber. Written by Nathan Montierth. Ransomware has reshaped the cybersecurity landscape, and a disturbing new trend is emerging: the targeting of ESXi environments. As the ...
-
Cyber Security News
Critical Teleport Vulnerability Let Attackers Remotely Bypass Authentication Controls
Summary 1. CVE-2025-49825 allows attackers to remotely bypass Teleport's authentication controls, affecting multiple versions of the secure access platform. 2. Teleport has issued security updates for ...