Category: Cybersecurity News
-
Critical Remote Code Execution Vulnerability Discovered in WingFTP
Researchers at RCE Security have identified a severe security flaw affecting WingFTP, a popular cross-platform FTP server software. This vulnerability, designated as CVE-2025-47812, has been assigned a maximum CVSS score of 10, indicating its high severity. Successful exploitation could allow remote attackers to execute arbitrary code on affected systems, potentially leading to full system compromise.…
-
Critical Sudo Vulnerability in Linux Systems Enables Privilege Escalation via chroot Feature
The Stratascale Cyber Research Unit has recently identified a significant security flaw in the Linux sudo utility on a security report on their website. This vulnerability, tracked as CVE-2025-32463, allows unprivileged users to escalate their privileges to root by exploiting the chroot feature—used to restrict a process’s view of the filesystem—even if no sudo rules…
-
Security Update for ModSecurity XML Parsing Vulnerability
Recently, a security vulnerability was identified in ModSecurity, a popular web application firewall by OWASP (Open Web Application Security Project) used to protect websites and applications. The issue involves how ModSecurity handles empty XML tags when the xml to arguments feature is enabled, potentially causing a segmentation fault that could disrupt service. In ModSecurity versions…
-
Cisco Issues Critical Security Updates for Unified Communications Manager
In a recent security advisory, Cisco has released an update patching a serious vulnerability affecting its Unified Communications Manager (UCM) platform. The issue centers around static SSH credentials embedded within certain versions of Cisco UCM and Session Management Edition (SME). These default root account credentials are meant solely for development purposes and can’t be modified…
-
Security Flaw in WordPress Forminator Plugin Affects Over 600k WordPress Sites
A serious security flaw allows attackers to delete arbitrary files on affected sites, including critical configuration files. According to the WordPress plugin directory, it is active on over 600,000 WordPress websites. WordPress security plugin Wordfence recently identified a high-severity vulnerability in the widely-used Forminator plugin affecting versions ≤ 1.44.2. This flaw enables unauthenticated attackers to…
-
Google Chrome Update Fixes Vulnerability in V8 JavaScript Engine
On June 30, 2025, Google rolled out a new update for Chrome across all major desktop platforms—Windows, Mac, and Linux. The latest version updates are being gradually distributed to users over the coming days and weeks. This update includes a range of improvements and, most importantly, addresses a significant security vulnerability. The primary update of…
-
Security Flaws Found in Bluetooth Chip Used by Top Headphone Manufacturers
A major Bluetooth security issue has come to light, and it could affect millions of users of popular wireless headphones and earbuds — including models from Sony, Bose, JBL, Marshall, and others. Cybersecurity firm ERNW recently uncovered multiple vulnerabilities in Bluetooth chips made by Airoha, a major supplier used in True Wireless Stereo (TWS) devices.…
Categories:
Have any comments or suggestions? Feel free to let us know!
