Alerts

Mozilla has released an updated Firefox version 143, Firefox ESR versions 115.28 and 140.3 to fix multiple vulnerabilities. The addressed vulnerabilities could allow the attacker to perform spoofing attacks, bypass security restrictions, obtain sensitive information, execute arbitrary code, and gain access to the affected system. Sample of the addressed vulnerabilities: 1. Mozilla Firefox Memory Safety […]

Google has released an updated Chrome version 140.0.7339.185/.186 for Windows/Mac, and 140.0.7339.185 for Linux. The addressed vulnerabilities could allow the remote attacker to bypass security restrictions, execute arbitrary code, and gain access to the affected system by persuading the victim to visit a specially crafted website. Sample of the addressed vulnerabilities: Google Chrome Use After

Cisco has released security updates to fix several vulnerabilities affecting multiple Cisco products. The addressed vulnerabilities could allow the attacker to perform denial of service attacks, conduct cross-site scripting attacks, perform cross-site request forgery attacks, obtain sensitive information, or bypass security restrictions to the affected product. Sample of addressed vulnerabilities: 1. Cisco Secure Firewall Adaptive

Google has released an updated Chrome version 140.0.7339.127/.128 for Windows, 140.0.7339.132/.133 for Mac, and 140.0.7339.127 for Linux. The addressed vulnerabilities could allow the remote attacker to execute arbitrary code and gain access to the affected system by persuading the victim to visit a specially crafted website. Sample of the addressed vulnerabilities: Google Chrome Use After

Ivanti has released security updates to fix several vulnerabilities across multiple Ivanti products. The addressed vulnerabilities could allow the attacker to bypass security restrictions, perform denial of service or cross-site scripting attacks, conduct server-side request forgery attacks, or execute arbitrary code, and gain access to the affected system. Sample of the addressed vulnerabilities: 1. Ivanti

Zoom has released a security update to fix several vulnerabilities across multiple Zoom products. The addressed vulnerabilities could allow the attacker to conduct denial of service attacks, gain elevated privileges, bypass security restrictions, or obtain sensitive information from the affected system. Sample of the addressed vulnerabilities: 1. Zoom Workplace for Windows on ARM – Missing

Google has released an updated Chrome version 140.0.7339.80/81 for Windows, Mac, and 140.0.7339.80 for Linux. The addressed vulnerabilities could allow the remote attacker to bypass security restrictions or execute arbitrary code and gain access to the affected system by persuading the victim to visit a specially crafted website. Sample of the addressed vulnerabilities: 1. Google

Cisco has released security updates to fix several vulnerabilities affecting multiple Cisco products. The addressed vulnerabilities could allow the attacker to perform denial of service attacks, conduct cross-site scripting attacks, manipulate files, obtain sensitive information, or gain elevated privileges on the affected product. Sample of addressed vulnerabilities: 1. Cisco Nexus 3000 and 9000 Series Switches

Google has released an updated Chrome version 139.0.7258.154/.155 for Windows, Mac, and 139.0.7258.154 for Linux. The addressed vulnerability could allow the remote attacker to execute arbitrary code and gain access to the affected system by persuading a victim to visit a specially crafted website. Google Chrome Code Execution Vulnerability (CVE-2025-9478): CVSS: 8.8 Attack Vector: Network

Apple has released security updates to address a vulnerability across macOS Sequoia, Sonoma, and Ventura. The addressed vulnerability could allow the attacker to execute arbitrary code and gain access to the affected system, caused by a memory corruption issue in the ImageIO component, while processing a malicious image file. Apple macOS Out-of-Bounds Write Vulnerability (CVE-2025-43300):

Mozilla has released an updated Firefox version 142, Firefox ESR versions 140.2, 128.14, and 115.27 to fix multiple vulnerabilities. The addressed vulnerabilities could allow the attacker to perform a denial of service attack, spoofing attacks, bypass security restrictions, obtain sensitive information, execute arbitrary code, and gain access to the affected system. Sample of the addressed

Fortra has released security updates to fix several vulnerabilities affecting multiple Fortra products. The addressed vulnerabilities could allow the attacker to perform a denial of service attack, obtain sensitive information, gain elevated privileges, conduct cross-site scripting attacks, or execute arbitrary commands/codes, and gain access to the affected systems. Sample of the addressed vulnerabilities: Fortra FileCatalyst

Google has released an updated Chrome version 139.0.7258.138/.139 for Windows, Mac, and 139.0.7258.138 for Linux. The addressed vulnerability could allow the remote attacker to execute arbitrary code and gain access to the affected system by persuading the victim to visit a specially crafted webpage. Google Chrome Code Execution Vulnerability (CVE-2025-9132): CVSS: 8.8 Attack Vector: Network

Apache has released a security update to address a vulnerability affecting multiple versions of Apache Tomcat. The addressed vulnerability could allow the remote attacker to perform denial of service attacks on the affected products. Apache Tomcat Denial of Service Vulnerability (CVE-2025-48989): CVSS: 7.5 Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None