Security Digest archive
August 2025
6 editorial briefs, 15 known exploited (cisa kev) additions and 27 critical advisories across 19 digest days.
Friday, August 29, 2025
- KEV CVE-2025-57819 Sangoma FreePBX
Thursday, August 28, 2025
- Critical 2 advisories: com.ritense.valtimo:core, github.com/neuvector/neuvector
Wednesday, August 27, 2025
- Critical 1 advisory: solspace/craft-freeform
Tuesday, August 26, 2025
- Check exposure Nx s1ngularity: Malicious npm Releases Hijack AI CLIs
- Check exposure Salesloft Drift OAuth Token Theft Hits Salesforce Orgs
- KEV CVE-2025-7775 Citrix NetScaler
Monday, August 25, 2025
- KEV CVE-2025-48384 Git Git
- KEV CVE-2024-8069 Citrix Session Recording
- KEV CVE-2024-8068 Citrix Session Recording
Thursday, August 21, 2025
- KEV CVE-2025-43300 Apple iOS, iPadOS, and macOS
- Critical 2 advisories: cipher-base, sha.js
Wednesday, August 20, 2025
- Critical 3 advisories: spree, org.apache.tika:tika-parser-pdf-module, directus
Tuesday, August 19, 2025
- Critical 2 advisories: github.com/hydraide/hydraide, screenshot-desktop
Monday, August 18, 2025
- KEV CVE-2025-54948 Trend Micro Apex One
- Critical 1 advisory: github.com/projectcapsule/capsule
Thursday, August 14, 2025
- Critical 1 advisory: flowise
Wednesday, August 13, 2025
- KEV CVE-2025-8876 N-able N-Central
- KEV CVE-2025-8875 N-able N-Central
- Critical 3 advisories: m00nl1ght-dev/steam-workshop-deploy, activestorage, spree
Tuesday, August 12, 2025
- Check exposure GitHub Copilot "YOLO Mode" Prompt Injection RCE
- KEV CVE-2025-8088 RARLAB WinRAR
- KEV CVE-2013-3893 Microsoft Internet Explorer
- KEV CVE-2007-0671 Microsoft Office
Monday, August 11, 2025
- Check exposure WinRAR CVE-2025-8088: ADS Path Traversal Exploited by RomCom
Friday, August 8, 2025
- Critical 1 advisory: github.com/openbao/openbao
Thursday, August 7, 2025
- Critical 6 advisories: executorch, executorch, executorch, jwe, executorch, executorch
Wednesday, August 6, 2025
- Check exposure Exchange Hybrid CVE-2025-53786: On-Prem to Cloud Escalation
Tuesday, August 5, 2025
- KEV CVE-2022-40799 D-Link DNR-322L
- KEV CVE-2020-25079 D-Link DCS-2530L and DCS-2670L Devices
- KEV CVE-2020-25078 D-Link DCS-2530L and DCS-2670L Devices
- Critical 1 advisory: topthink/framework
Monday, August 4, 2025
- Critical 2 advisories: adodb/adodb-php, pyload-ng
Friday, August 1, 2025
- Most can relax Cursor CurXecute: Prompt Injection to RCE via mcp.json
- Critical 2 advisories: github.com/hashicorp/vault, @nestjs/devtools-integration