TheCyberThrone

Google Chrome 137 Released

Google has officially rolled out Chrome version 137.0.7151.55/56 to the Stable Channel, available for Windows, macOS, and Linux. This release isn't just about performance tweaks—it addresses 11 security vulnerabilities, some…

PravinKarthik May 28, 2025

Check Point Acquires Veriti Security

In a move that signals its commitment to next-generation cybersecurity, Check Point Software Technologies has announced its acquisition of Veriti Cybersecurity, a fast-rising Israeli startup specializing in Preemptive Exposure Management…

PravinKarthik May 28, 2025

Hazy Hawk: The Silent Hijacker Exploiting DNS Vulnerabilities

Hazy Hawk is a newly identified, highly persistent cyber threat actor that leverages weaknesses in Domain Name System (DNS) configurations—specifically dangling DNS records—to hijack subdomains of legitimate, high-profile organizations. Their…

PravinKarthik May 27, 2025

Mozilla Issues Emergency Patch After Critical Firefox Exploits at Pwn2Own 2025

During the Pwn2Own Berlin 2025 competition—a renowned event where top security researchers demonstrate zero-day exploits—two significant vulnerabilities in Mozilla Firefox were successfully leveraged. These zero-days, CVE-2025-4918 and CVE-2025-4919, prompted Mozilla…

PravinKarthik May 27, 2025

FBI Issues Warning About Silent Ransom Group

The Federal Bureau of Investigation (FBI) has issued a detailed Private Industry Notification (PIN) concerning a rising cybersecurity threat posed by a sophisticated cybercriminal group known as the Silent Ransom…

PravinKarthik May 27, 2025

NIST’s New Approach LEV to Vulnerability Prioritization

Overview The National Institute of Standards and Technology (NIST) has introduced Likely Exploited Vulnerabilities (LEV), a data-driven approach to assessing the likelihood of vulnerability exploitation. This new metric, developed in…

PravinKarthik May 26, 2025

CVE-2025-0133 impacts PaloAlto GlobalProtect

A cross-site scripting (XSS) vulnerability, identified as CVE-2025-0133, has been discovered in the GlobalProtect gateway and portal features of Palo Alto Networks PAN-OS. This flaw enables attackers to execute arbitrary…

PravinKarthik May 25, 2025

CVE-2025-31219 Race Condition Vulnerability in Apple’s XNU Kernel

A high-severity race condition vulnerability, tracked as CVE-2025-31219, has been discovered in Apple’s XNU kernel, affecting macOS, iOS, iPadOS, watchOS, tvOS, and visionOS. This flaw enables local privilege escalation, allowing…

PravinKarthik May 24, 2025