Vulnerability - CyAsha | Cyber Security Awareness

Fortra Patches Critical CVSS 10.0 Flaw in GoAnywhere MFT (CVE-2025-10035)

Researcher | 20/09/2025

Fortra, the company behind the widely used GoAnywhere Managed File Transfer (MFT) software, has released a critical security patch to […]

Mobile Security, Vulnerability

CVE-2025-43300: Apple Issues Backported Fix After Spyware Exploitation

Researcher | 16/09/2025

Apple has backported fixes for a major vulnerability that was actively exploited in sophisticated spyware attacks. The flaw, identified as

Threat Intel, Vulnerability

Critical DELMIA Apriso RCE Flaw CVE-2025-5086 Under Attack, CISA Alerts

Researcher | 12/09/2025

CISA has issued a warning about a newly discovered and actively exploited vulnerability in Dassault Systèmes DELMIA Apriso Manufacturing Operations Management (MOM)

Web Security, Vulnerability

CVE-2025-49870: WordPress Paid Membership Plugin Users at Risk from SQL Injection

Researcher | 01/09/2025

A new high-risk security flaw has been discovered in the WordPress Paid Membership Subscriptions plugin, a tool widely used to

cloud security, Vulnerability

Salesforce Data Breach: Salesloft OAuth Exploit via Drift AI App

Researcher | 27/08/2025

A major cybersecurity incident has shaken the SaaS ecosystem as hackers exploited a security gap in Salesloft’s Drift AI chat

cloud security, Vulnerability

Docker Desktop Vulnerability CVE-2025-9074 Rated 9.3 CVSS: Update Immediately

Researcher | 26/08/2025

Docker has released an urgent security update to fix a critical vulnerability in Docker Desktop for Windows and macOS. The

Threat Intel, Vulnerability

Cisco Patches Critical FMC RADIUS Flaw (CVE-2025-20265) with CVSS 10.0 Rating

Researcher | 15/08/2025

Cisco has released critical security updates to address a maximum-severity flaw in its Secure Firewall Management Center (FMC) Software. The

Security, Vulnerability

CVE-2025-25256: Fortinet Warns of Critical FortiSIEM Vulnerability With Exploit in the Wild

Researcher | 13/08/2025

Fortinet has issued a critical security alert regarding a severe vulnerability in its FortiSIEM product. The flaw, identified as CVE-2025-25256,

Alert, Vulnerability, Zero-Day

Hackers Exploit WinRAR Zero-Day CVE-2025-8088: Patch to Version 7.13 Now

Researcher | 11/08/2025

WinRAR, one of the most widely used file archiving tools for Windows, has patched a high-severity flaw tracked as CVE-2025-8088

cloud security, Vulnerability

CVE-2025-53786: Exchange Server Flaw Lets Hackers Access Cloud Without Detection

Researcher | 07/08/2025

Microsoft has issued a high-severity security warning about a critical vulnerability affecting on-premise Exchange Servers used in hybrid cloud setups.