Cyber alerts

135 results

April 2025

Published Wednesday 9 April 2025 (12:09) (updated 9 April 2025)

Microsoft Releases April 2025 Security Updates

Scheduled updates for Microsoft products, including security updates for 126 vulnerabilities, of which one is reported as exploited.

CC-4641 High

Published Friday 4 April 2025 (12:56) (updated 4 April 2025)

Exploited Vulnerability in Ivanti Connect Secure, Pulse Connect Secure, Policy Secure, and ZTA Gateway

CVE-2025-22457 could lead to remote code execution and has been exploited in the wild

March 2025

CC-4640 Medium

Published Friday 28 March 2025 (03:07) (updated 28 March 2025)

Mozilla Releases Security Updates for Firefox

Critical advisory addresses one exploited vulnerability that affects Firefox on Windows

CC-4639 Medium

Published Friday 28 March 2025 (03:04) (updated 28 March 2025)

Google Releases Security Updates for Chrome

Security update addresses an exploited high severity vulnerability in Google Chrome

CC-4638 Medium

Published Wednesday 26 March 2025 (02:46) (updated 2 April 2025)

Security Update Released for CrushFTP

CrushFTP has released a security update addressing a critical vulnerability that could lead to unauthorised access via remote and unauthenticated HTTP requests

CC-4636 Medium

Published Tuesday 25 March 2025 (05:06) (updated 27 March 2025)

Security Updates Released for Ingress NGINX Controller for Kubernetes

Five vulnerabilities discovered in Ingress NGINX Controller for Kubernetes could allow for takeover of a Kubernetes cluster

CC-4637 Medium

Published Tuesday 25 March 2025 (04:53) (updated 25 March 2025)

Broadcom Releases Security Advisory for VMware Tools for Windows

CVE-2025-22230 is an authentication bypass vulnerability in VMware Tools for Windows

CC-4635 Medium

Published Monday 24 March 2025 (03:42) (updated 7 April 2025)

Critical Vulnerability in Next.js React Framework

Next.js releases security update to address critical improper authentication vulnerability

CC-4634 Medium

Published Thursday 20 March 2025 (12:12) (updated 20 March 2025)

Proof-of-Concept Released for Veeam Backup & Replication Vulnerability

Successful exploitation of CVE-2025-23120 could lead to remote code execution

CC-4633 Medium

Published Monday 17 March 2025 (04:13) (updated 17 March 2025)

Exploitation of Apache Tomcat Vulnerability CVE-2025-24813

Exploitation of CVE-2025-24813 could allow an attacker to achieve RCE, view security sensitive files, or inject content