Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

ionix

Microsoft SharePoint CVE-2025-53770: Actively Exploited Remote Code Execution via Insecure Deserialization

Jul 20, 2025 By Fara Hain In IONIX
Microsoft recently disclosed a critical remote code execution (RCE) vulnerability in Microsoft SharePoint Server, tracked as CVE-2025-53770. This flaw has been actively exploited in the wild, making it a high-priority concern for enterprises relying on SharePoint for content management and collaboration. In this blog, we’ll unpack the technical root of the vulnerability, how exploitation works, the risks posed, mitigation steps, and what to do if you think you may be impacted. In this article.
Read Post
How Credit Card Data Theft Impacts Personal Security

How Credit Card Data Theft Impacts Personal Security

Jul 20, 2025 By SecuritySenses In SecuritySenses
Credit card data theft poses real risks to your personal security. Beyond financial losses, it can affect your privacy, your credit history, and your peace of mind. Understanding these impacts helps you take proactive steps to protect yourself.
Read Post
Arctic Wolf

Follow-Up: Updates on Actively Exploited Information Disclosure Vulnerability "Citrix Bleed 2" in Citrix NetScaler ADC and Gateway (CVE-2025-5777)

Jul 18, 2025 By Andres Ramos In Arctic Wolf
In late June 2025, Arctic Wolf issued a security bulletin addressing a critical out-of-bounds read vulnerability in Citrix NetScaler ADC and Gateway that Citrix disclosed, tracked as CVE-2025-5777. This vulnerability affects NetScaler devices configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.
Read Post
Feroot

Thousands of WordPress Sites at Risk After Gravity Forms Breach

Jul 18, 2025 By Feroot In Feroot
A critical vulnerability in the popular Gravity Forms WordPress plugin has led to widespread malware injections across thousands of sites. The flaw is being actively exploited by threat actors, some of whom are inserting backdoors and malicious JavaScript into WordPress sites to carry out data theft, SEO poisoning, and client-side attacks.
Read Post
squarex

SquareX Collaborates with Top Fortune 500 CISOs to Launch The Browser Security Field Manual at Black Hat

Jul 17, 2025 By SquareX
SquareX announced the official launch of The Browser Security Field Manual at Black Hat USA 2025. In addition to a comprehensive practical guide to the latest TTPs attackers are using to target employees in the browser, this comprehensive manual features industry perspectives from leading CISOs from multiple Fortune 500 enterprises and other iconic companies, who share their perspectives on the evolving browser security landscape, the importance of each threat vector, and how they expect these attacks to evolve in the near future. Major contributors include.
Read Post
nucleus

Best Practices for Aggregating and Normalizing Exposure Data

Jul 17, 2025 By Adam Dudley In Nucleus
In our first article exploring vulnerability management vs. exposure management, we explored the growing recognition that exposure management is not just a rebranding of vulnerability management. Rather, it’s a strategic evolution. Where traditional vulnerability management often focuses narrowly on CVEs and technical severity, exposure management demands a broader, more integrated understanding of risk across assets, environments, and attack vectors.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.