Critical XXE Bug CVE-2025-66516 (CVSS 10.0) Hits Apache Tika, Requires Urgent Patch
Dec 05, 2025Ravie LakshmananApplication Security / Vulnerability A critical security flaw has…
Grafana Patches CVSS 10.0 SCIM Flaw Enabling Impersonation and Privilege Escalation
Nov 21, 2025Ravie LakshmananVulnerability / Threat Mitigation Grafana has released security updates…
Critical Cisco ISE Auth Bypass Flaw Impacts Cloud Deployments on AWS, Azure, and OCI
Jun 05, 2025Ravie LakshmananNetwork Security / Vulnerability Cisco has released security patches…
LDAPNightmare PoC Exploit Crashes LSASS and Reboots Windows Domain Controllers
Jan 03, 2025Ravie LakshmananWindows Server / Threat Mitigation A proof-of-concept (PoC) exploit…
Sophos Issues Hotfixes for Critical Firewall Flaws: Update to Prevent Exploitation
Dec 20, 2024Ravie LakshmananFirewall Security / Vulnerability Sophos has released hotfixes to…
Critical Apache Struts Flaw Found, Exploitation Attempts Detected
Dec 18, 2024Ravie LakshmananCyber Attack / Vulnerability Threat actors are attempting to…
SolarWinds Releases Patch for Critical Flaw in Web Help Desk Software
Aug 15, 2024Ravie LakshmananEnterprise Security / Vulnerability SolarWinds has released patches to…
Microsoft Warns of Unpatched Office Vulnerability Leading to Data Exposure
Aug 10, 2024Ravie LakshmananVulnerability / Enterprise Security Microsoft has disclosed an unpatched…