Apache Patches Two Serious Flaws in Solr Search Platform

The bugs can allow arbitrary path-write access and uploading of an arbitrary configset

Apple Warns iPhone Users of Exploited iOS Bug

The flaw (CVE-2025-24085) is fixed in iOS 18.3, iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3 and visionOS 2.3.

🎓️ Vulnerable U | #100

CISA's Advisory board disbanded, Zero click Outlook 0day, Fortinet saga continues, PowerSchool breach has data back to 1985, Sam Curry hacked a Subaru, and more!

SonicWall Warns of Potentially Exploited Critical Flaw

The critical flaw (CVE-2025-23006) has been identified in the SMA1000 Appliance Management Console and Central Management Console

Zero-Click OLE RCE (CVE-2025-21298) - Microsoft Outlook Impacted

Simply previewing a malicious RTF file in Microsoft Outlook can trigger the exploit—no additional clicks needed.

Mirai IoT Botnet Behind Record-Breaking DDoS Attack

Cloudflare, which mitigated the attack, said it targeted an Internet service provider (ISP) in Eastern Asia in 2024 and lasted 80 seconds

Attackers Target Aviatrix CVE-2024-50603 Flaw

U.S. Issues Sanctions Linked to Telecom, Treasury Breaches

The U.S. announced sanctions against a company and individual tied to major espionage attacks on the Treasury Department and U.S. telecom entities.

🎓️ Vulnerable U | #099

Biden's cybersecurity executive order, Anatomy of a voice phishing hack, PlugX malware campaign and subsequent FBI kill switch on it, Fortinet's bad week, FTC sues GoDaddy for not doing security basics, and much more!

Russian Spear-Phishing Attacks Targeted WhatsApp Accounts

The Star Blizzard threat group expanded its typical spear-phishing attack vector to target WhatsApp accounts.

Six Bugs Fixed in Rsync

The most serious flaw can lead to remote code execution