Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

CrowdStrike

CrowdStrike Named a Strong Performer in Forrester Wave for Unified Vulnerability Management

Jul 21, 2025 By Kamil Imtiaz In CrowdStrike
CrowdStrike is proud to be named a Strong Performer in The Forrester Wave: Unified Vulnerability Management Solutions, Q3 2025. We believe this recognition underscores the strength of CrowdStrike’s vision, the pace of our innovation, and the rapid adoption of CrowdStrike Falcon Exposure Management by customers transforming their vulnerability management, just 24 months after its launch.
Read Post
ionix

CVE-2025-54309: Critical Admin Access Vulnerability in CrushFTP - What You Need to Know and Do

Jul 20, 2025 By Fara Hain In IONIX
A critical remote code execution vulnerability, CVE-2025-54309, has been identified in CrushFTP server, impacting versions prior to 10.8.5 and 11.3.4_23. This vulnerability exists when the DMZ proxy feature is not in use. It stems from improper validation in the AS2 (Applicability Statement 2) protocol over HTTPS, allowing unauthenticated remote attackers to gain administrative access to the system.
Read Post
ionix

Microsoft SharePoint CVE-2025-53770: Actively Exploited Remote Code Execution via Insecure Deserialization

Jul 20, 2025 By Fara Hain In IONIX
Microsoft recently disclosed a critical remote code execution (RCE) vulnerability in Microsoft SharePoint Server, tracked as CVE-2025-53770. This flaw has been actively exploited in the wild, making it a high-priority concern for enterprises relying on SharePoint for content management and collaboration. In this blog, we’ll unpack the technical root of the vulnerability, how exploitation works, the risks posed, mitigation steps, and what to do if you think you may be impacted. In this article.
Read Post
How Credit Card Data Theft Impacts Personal Security

How Credit Card Data Theft Impacts Personal Security

Jul 20, 2025 By SecuritySenses In SecuritySenses
Credit card data theft poses real risks to your personal security. Beyond financial losses, it can affect your privacy, your credit history, and your peace of mind. Understanding these impacts helps you take proactive steps to protect yourself.
Read Post
Arctic Wolf

Follow-Up: Updates on Actively Exploited Information Disclosure Vulnerability "Citrix Bleed 2" in Citrix NetScaler ADC and Gateway (CVE-2025-5777)

Jul 18, 2025 By Andres Ramos In Arctic Wolf
In late June 2025, Arctic Wolf issued a security bulletin addressing a critical out-of-bounds read vulnerability in Citrix NetScaler ADC and Gateway that Citrix disclosed, tracked as CVE-2025-5777. This vulnerability affects NetScaler devices configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.
Read Post
Feroot

Thousands of WordPress Sites at Risk After Gravity Forms Breach

Jul 18, 2025 By Feroot In Feroot
A critical vulnerability in the popular Gravity Forms WordPress plugin has led to widespread malware injections across thousands of sites. The flaw is being actively exploited by threat actors, some of whom are inserting backdoors and malicious JavaScript into WordPress sites to carry out data theft, SEO poisoning, and client-side attacks.
Read Post
squarex

SquareX Collaborates with Top Fortune 500 CISOs to Launch The Browser Security Field Manual at Black Hat

Jul 17, 2025 By SquareX
SquareX announced the official launch of The Browser Security Field Manual at Black Hat USA 2025. In addition to a comprehensive practical guide to the latest TTPs attackers are using to target employees in the browser, this comprehensive manual features industry perspectives from leading CISOs from multiple Fortune 500 enterprises and other iconic companies, who share their perspectives on the evolving browser security landscape, the importance of each threat vector, and how they expect these attacks to evolve in the near future. Major contributors include.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.