As hackers exploit one high-severity SAP flaw, company warns of 3 more
CVE-2025-42957 allows low-privileged SAP users to achieve near-complete system compromise remotely, risking fraud, data theft, espionage, and ransomware.
Thousands of Citrix NetScaler boxes still sitting ducks
Thousands of Citrix NetScaler appliances remain unpatched against critical CVE-2025-7775, enabling active exploitation and widespread risk despite vendor fixes.
SharePoint vulnerability actively exploited: Microsoft rolls out emergency patches
Microsoft has issued an urgent warning about a critical zero-day vulnerability in SharePoint Server, registered as CVE-2025-53770, allowing remote code execution.
Incomplete NVIDIA patch could leave AI infrastructure and data at risk
NVIDIA's security update is inadequate, leaving systems exposed to critical vulnerabilities that could lead to serious breaches and operational issues.