Cyber alerts

102 results

May 2025

Published Monday 19 May 2025 (01:36) (updated 19 May 2025)

Mozilla Releases Security Updates for Firefox and Firefox ESR

Mozilla releases security updates addressing two critical vulnerabilities that could lead to an out-of-bounds read or write on a JavaScript object

CC-4658 Medium

Published Friday 16 May 2025 (01:40) (updated 16 May 2025)

Proof-of-Concept Released Oracle VM VirtualBox

CVE-2025-30712 could allow an attacker to escape the virtual machine and gain unauthorised access to Oracle VM VirtualBox accessible data

CC-4657 Medium

Published Wednesday 14 May 2025 (03:45) (updated 14 May 2025)

Fortinet Releases Multiple Security Advisories

The security advisories address two critical vulnerabilities, of which one is reported as exploited

CC-4656 Medium

Published Wednesday 14 May 2025 (03:29) (updated 14 May 2025)

Microsoft Releases May 2025 Security Updates

Scheduled updates for Microsoft products, including security updates for 72 vulnerabilities, of which five have been reported as being actively exploited.

CC-4655 High

Published Wednesday 14 May 2025 (11:08) (updated 28 May 2025)

Active Exploitation of Zero-Day Vulnerabilities in Ivanti Endpoint Manager Mobile

Ivanti has addressed two exploited vulnerabilities that, when chained, could lead to unauthenticated remote code execution

CC-4654 Medium

Published Tuesday 13 May 2025 (01:59) (updated 13 May 2025)

Apple Releases Security Updates for Multiple Products

Security updates include multiple vulnerabilities that could lead to memory corruption or privilege escalation

CC-4653 Medium

Published Monday 12 May 2025 (01:57) (updated 12 May 2025)

Mitel Releases Security Advisory for Mitel SIP Phones

Mitel releases security advisory addressing two vulnerabilities in Mitel SIP Phones

CC-4652 Medium

Published Thursday 8 May 2025 (01:56) (updated 30 May 2025)

Cisco Releases May 2025 IOS XE Software Security Advisory Bundled Publication

Bundled publication contains 20 security advisories, including one critical vulnerability

CC-4651 Medium

Published Wednesday 7 May 2025 (10:57) (updated 23 May 2025)

Proof-of-Concept Released for SysAid On-Premise

Four vulnerabilities could allow an attacker to perform unauthenticated remote command execution

CC-4650 Medium

Published Tuesday 6 May 2025 (02:45) (updated 6 May 2025)

MicroDicom Releases DICOM Viewer Software Update

Two vulnerabilities could allow an attacker to corrupt the memory of the application or execute arbitrary code