High

Security Alerts

High 8.8KEVCVE-2025-8875 · CVE-2025-8876

CISA Flags Active Exploitation of Two Critical N-able N-central Flaws

CISA has added two N-able N-central flaws, CVE-2025-8875 and CVE-2025-8876, to its KEV catalog. On-premises MSP deployments should upgrade to 2025.3.1 now.

Comments Off on CISA Flags Active Exploitation of Two Critical N-able N-central Flaws

August 17, 2025

Security Alerts

High 8.8KEVCVE-2025-8088

WinRAR Zero-Day Actively Exploited

RomCom hackers exploited a WinRAR path traversal zero-day (CVE-2025-8088) through malicious RAR attachments. Update WinRAR to 7.13 manually.

Comments Off on WinRAR Zero-Day Actively Exploited

August 12, 2025

Security Alerts

High 8.8KEVCVE-2023-2533

Actively Exploited PaperCut NG/MF CSRF Flaw Added to CISA’s KEV Catalog

CISA confirms attackers are exploiting CVE-2023-2533, a CSRF flaw in PaperCut NG/MF that can let attackers change settings or run code via a logged-in admin.

Comments Off on Actively Exploited PaperCut NG/MF CSRF Flaw Added to CISA’s KEV Catalog

July 30, 2025

Security Alerts / Vulnerabilities

High 8.8KEVCVE-2023-42916 · CVE-2023-42917

Apple Patches 2 Actively Exploited Zero-Days in iOS, macOS and Safari

Apple fixed two exploited WebKit flaws, CVE-2023-42916 and CVE-2023-42917, in iOS 17.1.2, macOS Sonoma 14.1.2 and Safari 17.1.2.

Comments Off on Apple Patches 2 Actively Exploited Zero-Days in iOS, macOS and Safari

December 1, 2023

Security Alerts

High 7.8KEVCVE-2023-38831

WinRAR Flaw Exploited in New Campaign Linked to Pro-Russian Hackers

Hackers are using booby-trapped archives that exploit WinRAR CVE-2023-38831 to steal browser credentials. Update WinRAR to 6.23 or later.

Comments Off on WinRAR Flaw Exploited in New Campaign Linked to Pro-Russian Hackers

October 16, 2023

Google Deploys a Fix for a Zero-Day Vulnerability Under Active Exploitation

Security Alerts / Vulnerabilities

High 8.8KEVCVE-2023-5217

Google Fixes Chrome Zero-Day Under Active Exploitation (CVE-2023-5217)

Google patched an actively exploited heap buffer overflow in the libvpx VP8 encoder (CVE-2023-5217). Update Chrome to 117.0.5938.132.

Comments Off on Google Fixes Chrome Zero-Day Under Active Exploitation (CVE-2023-5217)

September 29, 2023

Vulnerabilities

High 8.8CVE-2023-40931 · CVE-2023-40932

Nagios XI Flaws Allow SQL Injection and Privilege Escalation

Four flaws in Nagios XI 5.11.1 and earlier, three SQL injections and one XSS, can expose password hashes and API tokens. Update to 5.11.2.

Comments Off on Nagios XI Flaws Allow SQL Injection and Privilege Escalation

September 21, 2023