CISA Warns of Windows SMB Vulnerability Actively Exploited in Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Cybersecurity and Infrastructure Security Agency (CISA) issued an urgent alert on October 20, 2025, highlighting a severe vulnerability CVE-2025-33073 in Microsoft’s Windows SMB Client. Dubbed an improper access control …

71,000+ WatchGuard Devices Vulnerable to Remote Code Execution Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Shadowserver Foundation has uncovered more than 71,000 internet-exposed WatchGuard devices running vulnerable versions of Fireware OS. The flaw, tracked as CVE-2025-9242, stems from an out-of-bounds write vulnerability in the …

Dolby Digital Plus 0-Click Vulnerability Enables RCE Attack via Malicious Audio on Android

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical zero-click vulnerability in Dolby Digital Plus (DDP) audio decoding software has been disclosed, allowing attackers to execute malicious code remotely via seemingly innocuous audio messages. Google Project Zero’s …

AWS Outage Impacts Amazon, Snapchat, Prime Video, Canva and More – Update

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A widespread Amazon Web Services (AWS) outage on Monday disrupted operations for millions of users worldwide, knocking out access to everything from streaming giants to social media platforms and financial …

Canva Down – Suffers Global Outage, Leaving Millions of Users Unable to Access Platform

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Canva, the popular graphic design platform, is reeling from a widespread outage that has rendered its services inaccessible to millions of users worldwide. As of 19:16 AEDT (02:46 IST), the …

PoC Exploit Released for Windows Server Update Services Remote Code Execution Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A proof-of-concept (PoC) exploit has been released for a critical vulnerability in Microsoft’s Windows Server Update Services (WSUS), enabling unauthenticated attackers to execute remote code with SYSTEM privileges on affected …

New DefenderWrite Tool Let Attackers Inject Malicious DLLs into AV Executable Folders

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new tool called DefenderWrite exploits whitelisted Windows programs to bypass protections and write arbitrary files into antivirus executable folders, potentially enabling malware persistence and evasion. Developed by cybersecurity expert …

PoC Exploit Released for Linux-PAM Vulnerability Allowing Root Privilege Escalation

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A high-severity vulnerability in the Pluggable Authentication Modules (PAM) framework was assigned the identifier CVE-2025-8941. This vulnerability stems from the heart of Linux operating systems, enabling attackers with local access …

WatchGuard VPN Vulnerability Let Remote Attacker Execute Arbitrary Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

WatchGuard has disclosed a critical out-of-bounds write vulnerability in its Fireware OS, enabling remote unauthenticated attackers to execute arbitrary code via IKEv2 VPN connections. Designated CVE-2025-9242 under advisory WGSA-2025-00015, the …

Volkswagen Allegedly Hit by Ransomware Attack as 8Base Claims Sensitive Data Theft

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Volkswagen Group has issued a statement addressing claims by the ransomware group 8Base, which alleges it has stolen and leaked sensitive data from the automaker. The German carmaker maintains that …