InfoSecBulletin Cybersecurity for mankind

Daily a lot of cyberattack happen around the world including ransomware, malware attack, data breaches, website defacement and so on. It’s our daily security digest to cover the latest happenings in the world. A Daily Security Update is a concise, regularly published summary of the latest developments in cybersecurity. Its …

A critical Fortinet FortiSIEM vulnerability with publicly available proof-of-concept exploit code is now being abused in attacks. Security researcher Zach Hanley from Horizon3.ai reported vulnerability CVE-2025-64155, which combines two issues that enable arbitrary writes with admin permissions and privilege escalation to root access. “An improper neutralization of special elements used …

Cisco has confirmed that a serious zero-day vulnerability allowing remote code execution is being actively exploited in its Secure Email Gateway and Secure Email and Web Manager appliances. The CVE-2025-20393 flaw lets unauthorized attackers run arbitrary root commands by sending specific HTTP requests to the Spam Quarantine feature. Cisco aware …