Stay updated with the latest cybersecurity news! This weekly roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. Critical Wing FTP Server Vulnerability (CVE-2025-47812) Actively Being Exploited in the Wild
Published: 2025-07-11
A maximum-severity flaw in Wing FTP Server, CVE-2025-47812, is being actively exploited, allowing remote code execution via improper handling of null bytes in the web interface, addressed in version 7.4.4.thehackernews.com
2. PerfektBlue Bluetooth Vulnerabilities Expose Millions of Vehicles to Remote Code Execution
Published: 2025-07-11
Researchers found four security flaws in OpenSynergy’s BlueSDK Bluetooth stack, dubbed PerfektBlue, that could allow remote code execution on millions of vehicles from vendors like Mercedes-Benz, Volkswagen, and Skoda.thehackernews.com
3. GPUHammer: New RowHammer Attack Variant Degrades AI Models on NVIDIA GPUs
Published: 2025-07-12
NVIDIA urges customers to enable System-level Error Correction Codes (ECC) as a defense against a new RowHammer attack variant, GPUHammer, demonstrated against its GPUs, causing bit flips in GPU memory and degrading AI model accuracy from 80% to less than 1%.thehackernews.com
4. Over 600 Laravel Apps Exposed to Remote Code Execution Due to Leaked APP_KEYs on GitHub
Published: 2025-07-12
Cybersecurity researchers found that leaked Laravel APP_KEYs on GitHub can be exploited to gain remote code execution on over 600 applications, risking data and infrastructure. GitGuardian, in collaboration with Synacktiv, extracted over 260,000 APP_KEYs from 2018 to May 30, 2025, validating 400 as functional. The APP_KEY, essential for encrypting sensitive data, is often stored in the .env file and can be weaponized through a deserialization flaw.thehackernews.com
5. Fortinet Releases Patch for Critical SQL Injection Flaw in FortiWeb (CVE-2025-25257)
Published: 2025-07-11
Fortinet addressed a critical SQL injection vulnerability, CVE-2025-25257, in FortiWeb with a CVSS score of 9.6, allowing unauthenticated attackers to execute unauthorized database commands via crafted HTTP or HTTPS requests. The flaw affects versions 7.6.0 through 7.6.3, 7.4.0 through 7.4.7, 7.2.0 through 7.2.10, and 7.0.0 through 7.0.10, with upgrades recommended to fix it. Kentaro Kawane from GMO Cybersecurity reported the issue.thehackernews.com
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for weekly updates, and consider using tools like WP Umbrella to monitor your WordPress site for vulnerabilities and automate security patches. Stay safe online!