Cyber alerts

135 results

November 2025

Published Monday 10 November 2025 (01:14) (updated 10 November 2025)

QNAP Releases Security Updates for QTS and QuTS Hero

When chained together, the vulnerabilities could allow for unauthenticated remote code execution and full device takeover

CC-4713 Medium

Published Thursday 6 November 2025 (01:51) (updated 6 November 2025)

Cisco Releases Security Updates for Unified CCX

Two critical vulnerabilities could allow for RCE and authentication bypass in Unified Contact Center Express

October 2025

CC-4712 Medium

Published Wednesday 29 October 2025 (01:38) (updated 29 October 2025)

Apache Releases Security Updates

Proof-of-concept exploit code has been shared publicly for CVE-2025-55752, which could lead to RCE

CC-4711 High

Published Friday 24 October 2025 (11:27) (updated 27 October 2025)

Microsoft Releases Out-of-Band Security Update for Windows Server Update Service (WSUS)

CVE-2025-59287 is under active exploitation and could lead to unauthenticated remote code execution over a network

CC-4710 Medium

Published Thursday 23 October 2025 (11:34) (updated 23 October 2025)

Oracle Releases Security Advisory to Address Two Critical Severity Vulnerabilities in E-Business Suite

Oracle has released a quarterly rollup security advisory addressing CVE-2025-53072 and CVE-2025-62481, which, if successfully exploited, could lead to unauthenticated takeover of Oracle Marketing

CC-4709 High

Published Wednesday 15 October 2025 (04:02) (updated 16 October 2025)

F5 Issues Statement on Compromise of Internal F5 Networks

F5 has acknowledged source code and details about undisclosed vulnerabilities have been stolen by a state-sponsored attacker, but no exploitation has been observed

CC-4708 Medium

Published Wednesday 15 October 2025 (10:36) (updated 10 November 2025)

Microsoft Releases October 2025 Security Updates

Scheduled updates for Microsoft products address 175 vulnerabilities, of which 3 are under exploitation and 3 have been reported as publicly disclosed

CC-4707 Medium

Published Tuesday 14 October 2025 (02:07) (updated 14 October 2025)

Veeam Releases Security Updates for Backup & Replication and Windows Agent

Security bulletin addresses critical severity vulnerabilities that could allow for remote code execution and privilege escalation

CC-4706 High

Published Monday 13 October 2025 (02:34) (updated 16 October 2025)

Oracle Releases Security Advisory to address CVE-2025-61884 affecting E-Business Suite

Oracle has released an out-of-band security update addressing CVE-2025-61884, which, if successfully exploited, could lead to unauthenticated information disclosure

CC-4705 High

Published Monday 6 October 2025 (12:00) (updated 6 October 2025)

Oracle Releases Security Advisory for E-Business Suite

Oracle has reported exploitation of CVE-2025-61882 in the wild as a zero-day vulnerability which, if successfully exploited, could allow unauthenticated remote code execution on affected E-Business Suite appliances