CVE-2025-13207 2

Vulnerability (CVE)

⚡ Weekly Recap: Fortinet Exploit, Chrome 0-Day, BadIIS Malware, Record DDoS, SaaS Breach & More

Fortinet warned that a new FortiWeb flaw, CVE-2025-58034 (CVSS 6.7), has been exploited in the wild and was addressed in version 8.0.2, days after the company confirmed it silently patched a critical FortiWeb vulnerability, CVE-2025-64446 (CVSS 9.1), in...

Zero-Days & Exploits

⚡ Weekly Recap: Hot CVEs, npm Worm Returns, Firefox RCE, M365 Email Raid & More

Cyber Risks The Hacker News

The npm registry was hit a second time by a self-replicating worm dubbed "Sha1-Hulud: The Second Coming," affecting over 800 packages and 27,000 GitHub repositories and stealing API keys, cloud credentials, and npm and GitHub authentication data....

Malware