CVEFeed Newsroom – Latest Cybersecurity Updates

The "Cyber Newsroom Feed" module is a live feed of the latest cyber news enriched with CVE and vulnerability data. The feed is updated every 5 minutes and includes the latest news from the cyber security industry. The feed is designed to provide users with a comprehensive overview of the latest cyber security news and trends.

  • The Register
Oracle emits 603 patches, names one it wants you to worry about soon

Oracle has delivered its regular quarterly collection of patches: 603 in total, 318 for its own products, and another 285 for Linux code it ships. Big Red’s VP of security assurance Eric Maurice singl ...

Published Date: Jan 23, 2025 (9 months, 4 weeks ago)
  • BleepingComputer
Critical zero-days impact premium WordPress real estate plugins

The RealHome theme and the Easy Real Estate plugins for WordPress are vulnerable to two critical severity flaws that allow unauthenticated users to gain administrative privileges. Although the two fla ...

Published Date: Jan 22, 2025 (9 months, 4 weeks ago)
  • BleepingComputer
Cisco warns of denial of service flaw with PoC exploit code

Cisco has released security updates to patch a ClamAV denial-of-service (DoS) vulnerability, which has proof-of-concept (PoC) exploit code. Tracked as CVE-2025-20128, the vulnerability is caused by a ...

Published Date: Jan 22, 2025 (9 months, 4 weeks ago)
  • Kaspersky
CVE-2025-0411 – vulnerability in 7-Zip | Kaspersky official blog

vulnerabilities Researchers have discovered a vulnerability in the 7-Zip file archiver software. January 22, 2025 The vulnerability CVE-2025-0411 has been discovered in the popular 7-Zip file archiver ...

Published Date: Jan 22, 2025 (9 months, 4 weeks ago)
  • security.nl
Alpine laat beveiligingslek in infotainmentsysteem zitten: 'gedeeld risico'

Alpine, fabrikant van infotainmentsystemen voor auto's, is niet van plan een kwetsbaarheid te verhelpen waardoor een fysiek aanwezige aanvaller zonder enige authenticatie willekeurige code als root op ...

Published Date: Jan 22, 2025 (9 months, 4 weeks ago)
  • The Hacker News
Hackers Exploit Zero-Day in cnPilot Routers to Deploy AIRASHI DDoS Botnet

Threat actors are exploiting an unspecified zero-day vulnerability in Cambium Networks cnPilot routers to deploy a variant of the AISURU botnet called AIRASHI to carry out distributed denial-of-servic ...

Published Date: Jan 22, 2025 (9 months, 4 weeks ago)
  • Help Net Security
48,000+ internet-facing Fortinet firewalls still open to attack

Despite last week’s confirmation of and warnings about long-standing exploitation of CVE-2024-55591, a critical vulnerability affecting Fortinet Fortigate firewalls, too many vulnerable devices are st ...

Published Date: Jan 22, 2025 (9 months, 4 weeks ago)
  • TheCyberThrone
CVE-2025-23083 impacts Node.js

BackgroundNode.js is a widely-used JavaScript runtime built on Chrome’s V8 JavaScript engine, known for its efficiency and ability to handle asynchronous operations. The platform is integral to many w ...

Published Date: Jan 22, 2025 (9 months, 4 weeks ago)
  • security.nl
VeraCrypt stopt support 32-bit Windowsversies, dicht lekken in Linux-versie

Er is een nieuwe versie van encryptiesoftware VeraCrypt verschenen, die twee kwetsbaarheden in de Linux- en macOS-versies verhelpt. Daarnaast worden 32-bit versies van Windows niet meer ondersteund. V ...

Published Date: Jan 22, 2025 (10 months ago)
  • TheCyberThrone
CVE-2025-23195 impacts Apache Ambari

BackgroundApache Ambari is a widely-used open-source tool that helps manage, monitor, and provision Hadoop clusters. It provides a user-friendly interface, simplifies cluster operations, and supports ...

Published Date: Jan 22, 2025 (10 months ago)

Filters

Filter news that are affecting your technology stack
Showing 10 of 8182 Results