October 2025 – Page 5 – TheCyberThrone

GitLab’s Latest DoS Vulnerability CVE-2025-10004

GitLab, a leading DevOps platform, recently patched a critical Denial of Service (DoS) vulnerability discovered in October 2025. This security flaw, tracked as CVE-2025-10004, exposes GitLab instances to unauthenticated attackers…

PravinKarthik October 9, 2025

The Asahi Ransomware Attack: How Japan’s Beer Giant Was Targeted

In late September 2025, Asahi Group Holdings—Japan’s leading brewing company—became the victim of a high-profile ransomware attack that dramatically impacted the nation’s beverage supply chain. The incident, attributed to the…

PravinKarthik October 9, 2025

Avnet Data Breach

In late September 2025, Avnet, a global leader in electronic component distribution and supply chain solutions, confirmed a significant data breach that has sent ripples through the tech industry. The…

PravinKarthik October 8, 2025

CISA Adds Zimbra XSS Flaw to KEV After Active Exploitation

On October 6, 2025, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2025-27915—an actively exploited vulnerability in Zimbra Collaboration Suite (ZCS)—to its Known Exploited Vulnerabilities (KEV) catalog, mandating urgent remediation…

PravinKarthik October 8, 2025

Redishell: The Critical 13-Year-Old Redis Vulnerability Need to be Patched

In early October 2025, a devastating remote code execution (RCE) vulnerability in Redis—known as Redishell (CVE-2025-49844)—shook the cybersecurity community. Marked with a perfect CVSS score of 10.0, this flaw has…

PravinKarthik October 7, 2025

CISA Adds 7 Actively Exploited Vulnerabilities to KEV Catalog

The Cybersecurity and Infrastructure Security Agency (CISA) has expanded its Known Exploited Vulnerabilities (KEV) catalog in October 2025, adding several high-impact vulnerabilities being leveraged in real-world attacks. Organizations are urged…

PravinKarthik October 7, 2025

Cyber Hygiene in Action – My Personal Response to a Fraud Attempt

It was the evening of October 5th, 2025—pleasant, quiet, and just the way I like it. I was unwinding with a warm cup of coffee, letting the day settle, when…

PravinKarthik October 6, 2025

Security Certifications

CEH V13 Detailed Notes Part IV

Introduction on modules Module 10 — Denial-of-Service (DoS) Attacks DoS and DDoS attacks aim to exhaust system, network, or application resources to make services unavailable.Understand attack types — volumetric, protocol,…

PravinKarthik October 5, 2025