Critical ASP.NET Vulnerability Allows Attacker To Bypass Security Feature Remotely

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft has disclosed a serious security flaw in ASP.NET Core that enables authenticated attackers to smuggle HTTP requests and evade critical protections. Tracked as CVE-2025-55315, the vulnerability stems from inconsistent …

AWS Declares Major Outage Resolved After Nearly 24 Hours of Disruption

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Amazon Web Services (AWS), the world’s largest cloud computing provider, has officially marked a widespread outage in its US-EAST-1 region as resolved, following nearly a full day of cascading failures …

Hackers Attacking Remote Desktop Protocol Services With 30,000+ New IP Addresses Daily

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A persistent campaign targeting Microsoft Remote Desktop Protocol (RDP) services, with attackers deploying over 30,000 new IP addresses daily to exploit timing-based vulnerabilities. This coordinated effort, linked to a global …

Automatic BitLocker Encryption May Silently Lock Away Your Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A Reddit poster detailed how reinstalling Windows 11 unexpectedly encrypted two of their backup drives with BitLocker, locking away 3TB of irreplaceable data without any prior setup. The incident, shared …

CISA Warns of Windows SMB Vulnerability Actively Exploited in Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Cybersecurity and Infrastructure Security Agency (CISA) issued an urgent alert on October 20, 2025, highlighting a severe vulnerability CVE-2025-33073 in Microsoft’s Windows SMB Client. Dubbed an improper access control …

71,000+ WatchGuard Devices Vulnerable to Remote Code Execution Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Shadowserver Foundation has uncovered more than 71,000 internet-exposed WatchGuard devices running vulnerable versions of Fireware OS. The flaw, tracked as CVE-2025-9242, stems from an out-of-bounds write vulnerability in the …

Dolby Digital Plus 0-Click Vulnerability Enables RCE Attack via Malicious Audio on Android

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical zero-click vulnerability in Dolby Digital Plus (DDP) audio decoding software has been disclosed, allowing attackers to execute malicious code remotely via seemingly innocuous audio messages. Google Project Zero’s …

AWS Outage Impacts Amazon, Snapchat, Prime Video, Canva and More – Update

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A widespread Amazon Web Services (AWS) outage on Monday disrupted operations for millions of users worldwide, knocking out access to everything from streaming giants to social media platforms and financial …

Canva Down – Suffers Global Outage, Leaving Millions of Users Unable to Access Platform

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Canva, the popular graphic design platform, is reeling from a widespread outage that has rendered its services inaccessible to millions of users worldwide. As of 19:16 AEDT (02:46 IST), the …

PoC Exploit Released for Windows Server Update Services Remote Code Execution Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A proof-of-concept (PoC) exploit has been released for a critical vulnerability in Microsoft’s Windows Server Update Services (WSUS), enabling unauthenticated attackers to execute remote code with SYSTEM privileges on affected …