The Wordfence Threat Intelligence team has issued an urgent advisory about active exploitation of a critical vulnerability in the WP Freeio plugin for WordPress. Tracked as CVE-2025-11533, the flaw carries a CVSS score of 9.8 and enables privilege escalation, allowing attackers to take over vulnerable sites. Wordfence alerts to WP Freeio users emphasize the severity […]
The Internet Systems Consortium has released a patch for a high-severity vulnerability in the Kea DHCPv4 server that could allow attackers to crash the service using a specially crafted hostname. Tracked as CVE-2025-11232 and rated 7.5 on the CVSS scale, the flaw poses a significant risk to network stability. ISC fixes Kea DHCPv4 bug in […]
The Jenkins project on Thursday issued a critical security advisory revealing multiple vulnerabilities in its plugin ecosystem, including a serious authentication bypass affecting SAML-based logins. Jenkins hit by plugin flaws now faces heightened risks to server integrity and user confidentiality, with attackers potentially gaining unauthorized access through compromised modules. Among the identified issues is CVE-2025-64131, […]
The Cybersecurity and Infrastructure Security Agency (CISA) released updated threat detection guidance on October 29, 2025, addressing the actively exploited Windows Server Update Services (WSUS) vulnerability tracked as CVE-2025-59287. The alert comes after CISA warns of active hacks targeting this flaw, urging organizations to strengthen monitoring and apply mitigations immediately. The agency detailed new indicators […]
A widespread Microsoft Azure 365 outage has disrupted services across multiple sectors, just days after a similar issue affected Amazon Web Services. The back-to-back incidents have intensified concerns about the public sector’s heavy dependence on a few dominant cloud platforms. With key systems increasingly hosted in the cloud, the impact of such disruptions can ripple […]