Aggregator

The new CISA Associate designation recognizes ISACA members who have passed the CISA exam, but do not yet have the required experience

Fortinet has released fixes for a critical security flaw impacting FortiWeb that could enable an unauthenticated attacker to run arbitrary database commands on susceptible instances. Tracked as CVE-2025-25257, the vulnerability carries a CVSS score of 9.6 out of a maximum of 10.0. "An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] in

The cybersecurity landscape witnessed a significant breach in early 2025 when Arkana Ransomware emerged as a formidable threat actor, making its debut with a devastating attack on WideOpenWest (WOW!), a major U.S. internet service provider. The attack, which occurred in late March 2025, demonstrated the group’s sophisticated capabilities as they claimed to have successfully exfiltrated […]

The post Arkana Ransomware Claimed to Have Stolen 2.2 Million Customer Records appeared first on Cyber Security News.

A vulnerability was found in PHPGurukul Vehicle Parking Management System 1.13. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/manage-incomingvehicle.php. The manipulation of the argument del leads to sql injection. This vulnerability is handled as CVE-2025-7492. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability was found in PHPGurukul Vehicle Parking Management System 1.13. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/manage-outgoingvehicle.php. The manipulation of the argument del leads to sql injection. This vulnerability is known as CVE-2025-7491. The attack can be launched remotely. Furthermore, there is an exploit available.

A vulnerability was found in PHPGurukul Vehicle Parking Management System 1.13. It has been classified as critical. Affected is an unknown function of the file /admin/reg-users.php. The manipulation of the argument del leads to sql injection. This vulnerability is traded as CVE-2025-7490. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

A vulnerability was found in PHPGurukul Vehicle Parking Management System 1.13 and classified as critical. This issue affects some unknown processing of the file /admin/search-vehicle.php. The manipulation of the argument searchdata leads to sql injection. The identification of this vulnerability is CVE-2025-7489. The attack may be initiated remotely. Furthermore, there is an exploit available.

Microsoft has taken a significant step forward in bolstering the security of its Microsoft 365 ecosystem by systematically eliminating high-privileged access (HPA) across all applications, as part of its broader Secure Future Initiative (SFI). This initiative integrates efforts across the company’s infrastructure, products, and services to enhance cybersecurity protections, with a particular emphasis on the […]

The post Microsoft Removes High-Privilege Access to Strengthen Microsoft 365 Security appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Virtru's technology centers on the Trusted Data Format, an open standard that embeds security controls directly into data files rather than relying on traditional perimeter defenses.

The post Virtru secures $50 million investment to advance data-centric security standards appeared first on CyberScoop.

A vulnerability has been found in JoeyBling SpringBoot_MyBatisPlus up to a6a825513bd688f717dbae3a196bc9c9622fea26 and classified as critical. This vulnerability affects the function Download of the file /file/download. The manipulation of the argument Name leads to path traversal. This vulnerability was named CVE-2025-7488. The attack can be initiated remotely. Furthermore, there is an exploit available. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available.

A vulnerability, which was classified as critical, was found in JoeyBling SpringBoot_MyBatisPlus up to a6a825513bd688f717dbae3a196bc9c9622fea26. This affects the function SysFileController of the file /file/upload. The manipulation of the argument portraitFile leads to unrestricted upload. This vulnerability is uniquely identified as CVE-2025-7487. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available.

Submit #610577 / VDB-316142

Submit #610576 / VDB-316141

Submit #610574 / VDB-316140

Submit #610573 / VDB-316139

Submit #610575 / VDB-316132

A vulnerability, which was classified as critical, has been found in JGM Pandoc 3.6.4. Affected by this issue is some unknown functionality of the component iFrame Handler. The manipulation leads to server-side request forgery. This vulnerability is handled as CVE-2025-51591. The attack may be launched remotely. There is no exploit available.

Submit #609343 / VDB-316138

Submit #609342 / VDB-316137