Cybercriminals exploit Salesforce Application in High-Profile Data Breach Credited by Freepik VTA-004536 – Cybercriminals exploit Salesforce Application in High-Profile Data Breach Cybercriminal group ShinyHunters, previously known for their ties to the BreachForums website and their attacks on AWS infrastructure, resurfaced …
CODEREDVTA
Vulnerability and Threat Advisories
“Security rules and techniques that helping you stay ahead of cyber threats”
WhatsApp Desktop for Windows Allows Arbitrary Code Execution Via Malicious PYZ Files
WhatsApp Desktop for Windows Allows Arbitrary Code Execution Via Malicious PYZ Files Credited by Freepik VTA-004535 – WhatsApp Desktop for Windows Allows Arbitrary Code Execution Via Malicious PYZ Files Attackers are exploiting WhatsApp Desktop’s file transfer feature on Windows systems …
Palo Alto GlobalProtect Certificate Validation Flaw Enables Privilege Escalation
Palo Alto GlobalProtect Certificate Validation Flaw Enables Privilege Escalation Credited by Freepik VTA-004534 – Palo Alto GlobalProtect Certificate Validation Flaw Enables Privilege Escalation CVE-2025-2183 exposes a critical certificate validation flaw in Palo Alto GlobalProtect VPN clients (Windows/Linux) that allows adjacent …
Microsoft Warns of Critical IIS Web Deploy Flaw Enabling Remote Code Execution
Microsoft Warns of Critical IIS Web Deploy Flaw Enabling Remote Code Execution Credited by Freepik VTA-004533 – Microsoft Warns of Critical IIS Web Deploy Flaw Enabling Remote Code Execution On August 12, 2025, Microsoft disclosed CVE-2025-53772, a critical vulnerability in …
Critical Windows Flaw Turns Domain Controllers into Unwitting DDoS Weapons
Critical Windows Flaw Turns Domain Controllers into Unwitting DDoS Weapons Credited by Freepik VTA-004532 – Critical Windows Flaw Turns Domain Controllers into Unwitting DDoS Weapons The Win-DDoS vulnerability, revealed by SafeBreach researchers Or Yair and Shahak Morag at DEF CON …