CVE-2025-40537 2

Vulnerability (CVE)

CISA Adds Actively Exploited Solar Winds Web Help Desk RCE to KEV Catalog

CISA added CVE-2025-40551, a deserialization-of-untrusted-data flaw in SolarWinds Web Help Desk with a CVSS score of 9.8, to its Known Exploited Vulnerabilities catalog on Tuesday, flagging it as actively exploited and exploitable without authentication to...

Vulnerabilities & Patching

⚡ Weekly Recap: Proxy Botnet, Office Zero-Day, MongoDB Ransoms, AI Hijacks & New Threats

Cyber Risks The Hacker News

Google disrupted the IPIDEA residential proxy network, seizing or sinkholing command-and-control domains and reducing its available device pool by millions. The network turned enrolled devices into proxy exit nodes, sold access to customers, and has been...