CVEFeed Newsroom – Latest Cybersecurity Updates
The "Cyber Newsroom Feed" module is a live feed of the latest cyber news enriched with CVE and vulnerability data. The feed is updated every 5 minutes and includes the latest news from the cyber security industry. The feed is designed to provide users with a comprehensive overview of the latest cyber security news and trends.
-
The Hacker News
⚡ Weekly Recap: Windows 0-Day, VPN Exploits, Weaponized AI, Hijacked Antivirus and More
Attackers aren't waiting for patches anymore — they are breaking in before defenses are ready. Trusted security tools are being hijacked to deliver malware. Even after a breach is detected and patched ...
-
cert.pl
Vulnerabilities in SoftCOM iKSORIS software
CVE ID CVE-2024-10087 Publication date 14 April 2025 Vendor SoftCOM Product iKSORIS Vulnerable versions All before 79.0 Vulnerability type (CWE) Improper Neutralization of Input During Web Page Genera ...
-
Cyber Security News
Chinese Hackers Exploit Ivanti VPN Vulnerabilities to Infiltrate Organizations
A China-linked advanced persistent threat (APT) group has exploited critical vulnerabilities in Ivanti Connect Secure VPN appliances to infiltrate organizations across 12 countries and 20 industries, ...
-
Daily CyberSecurity
GPT-4 Retiring: GPT-4o Takes Over in ChatGPT
OpenAI recently confirmed on its technical support site that the GPT-4 model will officially be retired from the ChatGPT service by the end of April this year, to be succeeded by GPT-4o. However, deve ...
-
The Register
Old Fortinet flaws under attack with new method its patch didn't prevent
Infosec In Brief Fortinet last week admitted that attackers have found new ways to exploit three flaws it thought it had fixed last year. The cybersecurity firm published a notice last Thursday detail ...
-
InfoSec Write-ups
MisCloud — HackTheBox Sherlock Writeup
MisCloud — HackTheBox Sherlock WriteupIntroductionThis sherlock from HackTheBox involves a security incident affecting the “DummyExample” e-commerce startup, which recently migrated its operations fro ...
-
huntress.com
CVE-2025-30406 - Critical Gladinet CentreStack & Triofox Vulnerability Exploited In The Wild
Special thanks to Craig Sweeney, Hayden Drummond, Michael Tigges, Tanner Filip, Jevon Ang, Jamie Dumas, Stephanie Fairless, and Lindsey Welch for their contributions and support for this writeup. On F ...
-
Daily CyberSecurity
Fortinet Uncovers Threat Actor Persistence via Symbolic Link Exploit in FortiGate Devices
In an urgent alert to the cybersecurity community, Fortinet has detailed an active threat campaign exploiting known vulnerabilities in FortiGate appliances, highlighting a novel post-exploitation tech ...
-
Cyber Security News
Hackers Allegedly Selling FortiGate Firewall 0-Day Exploit on Dark Web Forum
A threat actor has reportedly advertised a zero-day exploit targeting Fortinet’s FortiGate firewalls on a prominent dark web forum. The exploit claims to enable unauthenticated remote code execution ( ...
-
Daily CyberSecurity
CVE-2025-32428: Jupyter Remote Desktop Proxy Exposes TigerVNC to Network Access
Researchers have uncovered a critical security flaw in Jupyter Remote Desktop Proxy, a widely used Jupyter extension that allows users to run graphical desktop environments like XFCE within a Jupyter ...