Chinese hackers attack via Ivanti & Fortinet VPNs
Targeted attacks on Japanese organizations were carried out via already known vulnerabilities in Ivanti and Fortinet VPN systems. The campaigns show once again how critical unpatched systems can be in production environments.
Microsoft closes 137 security gaps - including one zero-day
A total of 137 vulnerabilities were fixed as part of the July Patch Tuesday, including an actively exploited remote code execution vulnerability in SQL Server. Security managers should apply the updates immediately.
Diskstation ransomware group dismantled
An international law enforcement operation has stopped a criminal group that was infecting Synology NAS systems worldwide with ransomware. The gang targeted poorly secured network storage solutions in companies.
Google Chrome affected by zero-day (CVE-2025-6558)
A critical vulnerability in the GPU component of Chrome is being actively exploited. Under certain circumstances, it allows users to break out of the sandbox. Google has reacted quickly - users should update to version 138.0.7204.157 or .158 immediately.
Wing FTP Server: Remote code execution via CVE-2025-47812
A zero-byte vulnerability in the Wing FTP Server allows attackers to inject code - in the worst case, the entire server can be compromised. This vulnerability is already being actively exploited.
Related news
What happened in the hacking world this week? (Week 33/2025)
Attack on the Canadian House of Commons
Threat Actor exploited a recently discovered Microsoft…
What happened in the hacking world this week? (KW 32/2025)
US court system hacked - witness information compromised
A targeted attack on the US federal court…
Router - What is it?
Definition
A router is a device that connects our home to the internet and often also provides a…