The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical Fortinet FortiWeb vulnerability to its Known Exploited Vulnerabilities (KEV) catalog, confirming active exploitation of the SQL injection flaw in cyberattacks worldwide. The vulnerability, tracked as CVE-2025-25257, affects Fortinet’s FortiWeb web application firewall and carries a severe CVSS score of 9.6 out of 10. […]...
Popular npm linter packages hijacked via phishing to drop malware
BleepingComputer
2 hours ago
Popular npm linter packages hijacked via phishing to drop malware Ax Sharma July 19, 2025 08:51 AM 0 Popular JavaScript libraries were hijacked this week and turned into malware droppers, in a supply ...
