Daily news, analysis and practical guides explaining what happened, who is affected and what to do next. We also turn this knowledge into practical training for organisations.
Vulnerabilities and CVEs In summer 2025, CVE-2025-53770 in SharePoint Server let attackers take over servers with no login. We analyse the ToolShell chain and its lessons.
Vulnerabilities and CVEs CVE-2025-47812 (CVSS 10.0) enables RCE in Wing FTP Server before 7.4.4, including via anonymous access. PoC, KEV, detection and fixes.
Vulnerabilities and CVEs CVE-2025-5777 let attackers pull session tokens from Citrix NetScaler gateways, bypassing MFA. We analyse CitrixBleed 2 and the defence.
Vulnerabilities and CVEs CVE-2025-49113 (CVSS 9.9) enables code execution in Roundcube through PHP deserialization. Versions, public PoC, detection and updates.
Threats and Incidents In 2025 Scattered Spider paralysed UK retail. The weapon wasn't a 0-day but a helpdesk call. We break down the technique and the defence.
Vulnerabilities and CVEs CVE-2025-31324 in SAP NetWeaver let attackers upload a web shell with no login and take over the ERP. We analyse attacks on a company's heart.
Vulnerabilities and CVEs CVE-2025-32433 is a CVSS 10.0 unauthenticated RCE in Erlang/OTP SSH. Affected versions, public PoC, detection and vendor fixes.
Vulnerabilities and CVEs CVE-2025-29824 is another 0-day in the Windows CLFS driver, used by ransomware to seize SYSTEM. Why this class of flaw returns and how to limit the risk.
Vulnerabilities and CVEs CVE-2025-3248 (CVSS 9.8) enables unauthenticated code execution in Langflow before 1.3.0. Public PoC, KEV status, detection and fixes.
Vulnerabilities and CVEs CVE-2025-1974 (CVSS 9.8) enables ingress-nginx RCE and possible Kubernetes takeover. Affected versions, public PoC, detection and fixes.
Threats and Incidents In February 2025, $1.5bn in crypto vanished from Bybit. We break down the Lazarus attack and what failed despite a cold wallet.
Once a month, a concise summary of the vulnerabilities and threats that matter. No spam, unsubscribe anytime.
