Vulnerabilities SonicWall Confirms Exploitation of New SMA Zero-Day SonicWall has confirmed that an SMA 1000 zero-day tracked as CVE-2025-23006 has been exploited in the wild. Eduard KovacsJanuary 28, 2025
Mobile & Wireless Apple Patches First Exploited iOS Zero-Day of 2025 Apple has released fixes for dozens of vulnerabilities in its mobile and desktop products, including an iOS zero-day exploited in attacks. Ionut ArghireJanuary 28, 2025
ICS/OT Building Automation Protocols Increasingly Targeted in OT Attacks: Report Industrial automation protocols continue to be the most targeted in OT attacks, but building automation systems have been increasingly targeted. Eduard KovacsJanuary 27, 2025
Vulnerabilities CISA Warns of Old jQuery Vulnerability Linked to Chinese APT CISA has added the JQuery flaw CVE-2020-11023, previously linked to APT1, to its Known Exploited Vulnerabilities (KEV) catalog. Eduard KovacsJanuary 24, 2025
Vulnerabilities SonicWall Learns From Microsoft About Potentially Exploited Zero-Day SonicWall has credited Microsoft for reporting CVE-2025-23006, a critical remote command execution vulnerability possibly exploited in the wild. Eduard KovacsJanuary 23, 2025
Data Breaches Data From 15,000 Fortinet Firewalls Leaked by Hackers Hackers have leaked 15,000 Fortinet firewall configurations, which were apparently obtained as a result of exploitation of CVE-2022–40684. Eduard KovacsJanuary 16, 2025
Vulnerabilities Fortinet Confirms New Zero-Day Exploitation Fortinet patches critical vulnerabilities, including a zero-day that has been exploited in the wild since at least November 2024. Eduard KovacsJanuary 15, 2025
Malware & Threats CISA Warns of Second BeyondTrust Vulnerability Exploited in Attacks Attackers have been exploiting a second vulnerability in BeyondTrust’s remote management solutions, CISA warns. Ionut ArghireJanuary 14, 2025
Vulnerabilities Many Ivanti VPNs Still Unpatched as UK Domain Registry Emerges as Victim of Exploitation Many Ivanti VPNs are still exposed to attacks exploiting a recent vulnerability tracked as CVE-2025-0282 and Nominet has been named as a victim. Eduard KovacsJanuary 14, 2025
Cloud Security Critical Aviatrix Controller Vulnerability Exploited Against Cloud Environments Attackers are exploiting a critical vulnerability in Aviatrix Controller to execute arbitrary code in AWS cloud environments. Ionut ArghireJanuary 14, 2025
Vulnerabilities GFI KerioControl Firewall Vulnerability Exploited in the Wild Threat actors are exploiting a recent GFI KerioControl firewall vulnerability that leads to remote code execution. Ionut ArghireJanuary 9, 2025
Malware & Threats Exploitation of New Ivanti VPN Zero-Day Linked to Chinese Cyberspies Google Cloud’s Mandiant has linked the exploitation of CVE-2025-0282, a new Ivanti VPN zero-day, to Chinese cyberspies. Eduard KovacsJanuary 9, 2025