Vulnerabilities Cisco Confirms Some Products Impacted by Critical Erlang/OTP Flaw Cisco is investigating the impact of the Erlang/OTP remote code execution vulnerability CVE-2025-32433 on its products. Eduard Kovacs2 days ago
Vulnerabilities SSL.com Scrambles to Patch Certificate Issuance Vulnerability A vulnerability in SSL.com has resulted in nearly a dozen certificates for legitimate domains being wrongly issued. Ionut Arghire4 days ago
Vulnerabilities Vulnerabilities Patched in Atlassian, Cisco Products Atlassian and Cisco have released patches for multiple high-severity vulnerabilities, including remote code execution bugs. Ionut ArghireApril 17, 2025
Vulnerabilities Critical Erlang/OTP SSH Flaw Exposes Many Devices to Remote Hacking Servers exposed to complete takeover due to CVE-2025-32433, an unauthenticated remote code execution flaw in Erlang/OTP SSH. Eduard KovacsApril 17, 2025
Vulnerabilities SonicWall Flags Old Vulnerability as Actively Exploited A SonicWall SMA 100 series vulnerability patched in 2021, which went unnoticed at the time of patching, is being exploited in the wild. Eduard KovacsApril 17, 2025
Vulnerabilities Critical Vulnerability Found in Apache Roller Blog Server A critical vulnerability in Apache Roller could be used to maintain persistent access by reusing older sessions even after password changes. Ionut ArghireApril 16, 2025
Vulnerabilities Chrome 135, Firefox 137 Updates Patch Severe Vulnerabilities Chrome 135 and Firefox 137 updates have been rolled out with patches for critical- and high-severity vulnerabilities. Ionut ArghireApril 16, 2025
Vulnerabilities SonicWall Patches High-Severity Vulnerability in NetExtender SonicWall has released fixes for three vulnerabilities in NetExtender for Windows, including a high-severity bug. Ionut ArghireApril 11, 2025
Vulnerabilities Juniper Networks Patches Dozens of Junos Vulnerabilities Juniper Networks has patched two dozen vulnerabilities in Junos OS and Junos OS Evolved, and dozens of flaws in Junos Space third-party dependencies. Ionut ArghireApril 10, 2025
ICS/OT Study Identifies 20 Most Vulnerable Connected Devices of 2025 Routers are the riskiest devices in enterprise networks as they contain the most critical vulnerabilities, a new Forescout report shows. Ionut ArghireApril 10, 2025
Vulnerabilities Fortinet Patches Critical FortiSwitch Vulnerability Fortinet fixes a critical-severity bug in FortiSwitch that could allow an attacker to modify administrative passwords. Ionut ArghireApril 9, 2025
Vulnerabilities SAP Patches Critical Code Injection Vulnerabilities SAP released 20 security notes on April 2025 patch day, including three addressing critical code injection and authentication bypass flaws. Ionut ArghireApril 8, 2025