CVEFeed Newsroom – Latest Cybersecurity Updates
The "Cyber Newsroom Feed" module is a live feed of the latest cyber news enriched with CVE and vulnerability data. The feed is updated every 5 minutes and includes the latest news from the cyber security industry. The feed is designed to provide users with a comprehensive overview of the latest cyber security news and trends.
-
BleepingComputer
SonicWall warns of SMA1000 RCE flaw exploited in zero-day attacks
SonicWall is warning about a pre-authentication deserialization vulnerability in SonicWall SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC), with reports that it has bee ...
-
BleepingComputer
Stealthy 'Magic Packet' malware targets Juniper VPN gateways
A malicious campaign has been specifically targeting Juniper edge devices, many acting as VPN gateways, with malware dubbed J-magic that starts a reverse shell only if it detects a “magic packet” in t ...
-
The Hacker News
Palo Alto Firewalls Found Vulnerable to Secure Boot Bypass and Firmware Exploits
Firmware Security / Vulnerability An exhaustive evaluation of three firewall models from Palo Alto Networks has uncovered a host of known security flaws impacting the devices' firmware as well as misc ...
-
The Register
FortiGate config leaks: Victims' email addresses published online
Thousands of email addresses included in the Belsen Group's dump of FortiGate configs last week are now available online, revealing which organizations may have been impacted by the 2022 zero-day expl ...
-
TheCyberThrone
CVE-2025-0314 impacts GitLab
CVE-2025-0314 is a high-severity cross-site scripting (XSS) vulnerability identified in GitLab, a widely used platform for version control, CI/CD, and DevOps. This vulnerability enables attackers to i ...
-
Krypt3ia
Krypt3ia Daily Cyber Threat Intelligence (CTI) Digest
Date: 1.23.25 Top Headlines New GhostGPT AI Chatbot Facilitates Malware Creation and Phishing Summary: Cybercriminals are selling access to a new malicious generative AI chatbot called GhostGPT. The ...
-
TheCyberThrone
CVE-2025-20156 impacts Cisco Meeting Management
CVE-2025-20156 is a critical vulnerability within the REST API of Cisco Meeting Management. This vulnerability allows a remote, authenticated attacker with low privileges to elevate their access right ...
-
Help Net Security
Cisco fixes ClamAV vulnerability with available PoC and critical Meeting Management flaw
Cisco has released patches for a critical privilege escalation vulnerability in Meeting Management (CVE-2025-20156) and a heap-based buffer overflow flaw (CVE-2025-20128) that, when triggered, could t ...
-
The Cyber Express
Cisco Warns of Critical Privilege Escalation Vulnerability in Meeting Management Platform
Cisco has issued a security advisory regarding a critical privilege escalation vulnerability found in Cisco Meeting Management. The vulnerability is tied to the REST API component of the platform, and ...
-
security.nl
SonicWall waarschuwt voor actief aangevallen lek in SMA1000-gateway
SonicWall waarschuwt klanten voor een actief aangevallen kwetsbaarheid in de Secure Mobile Access (SMA) 1000-gateway. Via het beveiligingslek kan een ongeauthenticeerde aanvaller kwetsbare apparaten o ...