Dark Reading

CVE Data Is Often Misinterpreted: Here's What to Look For

Most people only ever give common vulnerabilities and exposures (CVEs) a passing glance. They might look at the common vulnerability scoring system (CVSS) score, determine whether the list of affected ...
Security NEXT

「Oracle Fusion Middleware」の脆弱性悪用に注意喚起 - 米当局

「Oracle Fusion Middleware」の脆弱性「CVE-2025-61757」が悪用されていることを受け、米当局は注意喚起を行った。 米サイバーセキュリティインフラストラクチャセキュリティ庁（CISA）は現地時間2025年11月21日、「CVE-2025-61757」を「悪用が確認された脆弱性カタログ（KEV）」へ追加した。
Security Boulevard

CVE-2025-50165: This Windows JPEG Vulnerability Proves Detection Isn’t Enough

Home » Security Bloggers Network » CVE-2025-50165: This Windows JPEG Vulnerability Proves Detection Isn’t Enough ...
Dark Reading

Critical Flaw in Oracle Identity Manager Under Exploitation

The exploitation of CVE-2025-61757 follows a breach of Oracle Cloud earlier this year and a extortion campaign against Oracle ...
The Hacker News

NHS Warns of PoC Exploit for 7-Zip Symbolic Link–Based RCE Vulnerability

The vulnerability in question is CVE-2025-11001 (CVSS score: 7.0), which allows remote attackers to execute arbitrary code.
CSO OnlineOpinion

Fortinet criticized for ‘silent’ patching after disclosing second zero-day ...

CISA has ordered agencies to patch the FortiWeb web application firewall within seven days after news of exploits emerged.
ZDNet

Why the CVE database for tracking security flaws nearly went dark - and what happens next

Over the weekend, security experts were beginning to panic. MITRE announced that the US government had not renewed funding for the Common Vulnerabilities and Exposures (CVE) database. MITRE VP Yosry ...