InfoSecBulletin Cybersecurity for mankind
MITRE has released its 2025 Top 25 Most Dangerous Software Weaknesses list, identifying root causes of 39,080 Common Vulnerability and Exposure (CVE™) records this year. Common vulnerabilities are easy to spot and exploit, allowing attackers to take control of systems, steal sensitive information, or disrupt applications.
Developers, security teams, and executives now have a plan to prioritize fixes and improve software development lifecycles (SDLC). The annual ranking using real CVE data is now more important due to rising cyber threats.
After BDJobs, Directorate of Secondary and Higher Education 390k data surfaced online
Researchers show new technique to bypass AI safety guardrails in Grok and Gemini
About thousands of leaked AWS keys Held Full Admin Rights
US Bank investigates LockBit’s Data Breach Claims
Five new malware families actively targeting Asian Gov.t infra
T-Mobile Cuts Cables to Remove Chiness Salt Typhoon Hackers from Network
Splunk, Zyxel Patch Multiple Flaws Enabling RCE and Root Command Execution
“Zombie Card” attack revels expired Visa card may be used for contactless payments
Critical Zimbra RCE Flaw Actively Exploited in the Wild
Operation CameraSwarm
A single hacker compromise 1400+ Dahua camera worldwide
Injection flaws and memory corruption are still common, but new risks are emerging. Cross-site scripting (CWE-79) is still a major issue, even though it has dropped from last year’s top spot, with seven Known Exploited Vulnerabilities (KEVs).
2025 CWE Top 25 Most Dangerous Software Weaknesses lists:
