Ransomwarecritical
Week in review: SonicWall firewalls targeted in ransomware attacks, Black Hat USA 2025
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-53786 | On April 18th 2025, Microsoft announced Exchange Server Security Changes for Hybrid Deployments and accompanying non-security Hot Fix | 8.0 | 7% | ||
| CVE-2025-54253 | Pre-Auth RCE in Adobe Experience Manager Forms via Struts DevMode Misconfiguration | 10.0 | 89% | KEVPoC | KEV |
| CVE-2025-54254 | XXE Arbitrary File-Read in Adobe Experience Manager Forms 6.5 | 8.6 | 77% | ||
| CVE-2025-54948 | Pre-auth OS command injection in Trend Micro Apex One on-prem Management Console | 9.8 | 25% | KEV | KEV |
| CVE-2025-54987 | A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute… | 9.8 | 17% |
From the original article
7 min read at helpnetsecurity.com
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Black Hat USA 2025 took place at the Mandalay Bay Convention Center in Las Vegas. Explore related news, photos, product releases, and more. AIBOMs are the new SBOMs: The missing link in AI risk management
By @helpnetsecurity · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.