Tuesday, March 25, 2025

Vulnerability

CISA Warns of NAKIVO Backup Flaw Exploited in Attacks with PoC Released

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning about a serious vulnerability in the NAKIVO Backup and Replication software, known...

Critical Veeam Backup & Replication Vulnerability Allows Remote Execution of Malicious Code

A critical vulnerability in Veeam Backup & Replication software has been disclosed, posing a significant risk to users.This vulnerability, identified as CVE-2025-23120, allows remote...

Linux Kernel Vulnerability Allows Attackers to Escalate Privileges via Out-of-Bounds Write

A recently discovered vulnerability in the Linux kernel, identified as CVE-2025-0927, poses a significant threat to system security.This flaw, present in the HFS+ file...

mySCADA myPRO Manager RCE Vulnerabilities Allow Remote Attackers to Take Control of ICS Devices

In a significant discovery, PRODAFT's security research team has identified two critical vulnerabilities in the mySCADA myPRO Manager, a widely used Supervisory Control and...

Threat Actors Leverage Legacy Drivers to Circumvent TLS Certificate Validation

Threat actors have recently been exploiting legacy drivers to bypass certificate validation, leveraging a technique known as "Legacy Driver Exploitation."This method involves using...

VPN Vulnerabilities Become a Primary Weapon for Threat Actors Targeting Organizations

In recent years, VPN vulnerabilities have emerged as a critical threat vector for organizations worldwide.Threat actors, including both cybercriminal groups and state-sponsored entities,...

Microsoft Windows NTLM File Explorer Vulnerability Exploited in The Wild – PoC Released

A significant vulnerability in Microsoft Windows File Explorer, identified as CVE-2025-24071, has been discovered and is being actively exploited in the wild.This vulnerability...

41% of Successful Logins Across Websites Involve Compromised Passwords

A recent analysis by Cloudflare reveals a concerning trend in online security: nearly 41% of successful logins across websites involve compromised passwords.This issue...