Browsing: vulnerability disclosure

Quick Takeaways The updated CISA Cybersecurity Performance Goals (CPG 2.0) emphasize a risk-based, outcome-driven approach…

Summary Points The React2Shell vulnerability (CVE-2025-55182), affecting React Server Components, was publicly disclosed and quickly…

Summary Points A critical vulnerability (CVE-2025-55182) in React Server Components, used globally across many web…

Fast Facts The University of Pennsylvania, along with other Ivy League schools and organizations, was…

Summary Points Google disclosed two high-severity zero-day vulnerabilities (CVE-2025-48633 and CVE-2025-48572) affecting Android, potentially exploited…

Quick Takeaways ENISA has been officially designated a CVE Program Root, expanding its role in…

Summary Points Fortinet’s critical web application firewall vulnerability (CVE-2025-64446) was exploited in the wild for…

Summary Points Amazon’s threat intelligence detected a highly-resourced threat actor exploiting zero-day vulnerabilities in Cisco…

Essential Insights Microsoft fixed 63 vulnerabilities, including one active zero-day (CVE-2025-62215) affecting the Windows Kernel,…

Quick Takeaways A nation-state attacker stole F5’s source code and details on 44 vulnerabilities, but…