Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Forward Networks

CWE vs CVE vs KEV: Untangling the Security Alphabet Soup

Oct 21, 2025 By Forward Networks In Forward Networks
Understanding the differences between CWE, CVE, and KEV is critical for modern security and network teams. These acronyms represent the building blocks of threat identification and response, yet many professionals don’t fully grasp how they differ or interact. This blog breaks them down, shows their relationships, and explains how Forward Networks helps correlate them across your environment.
Read Post
CalCom

Yet Another SMB-Related CVE

Oct 21, 2025 By CalCom In CalCom
CISA has just added a new CVE regarding SMB, with a very high CVSS rating. CVE-2025-33073 is a high-severity (CVSS 8.8) vulnerability in the Windows SMB client caused by improper access control (CWE-284). An authenticated attacker can exploit it over the network to gain elevated privileges. Microsoft has issued guidance on how it should be patched and CalCom recommend this be done immediately.
Read Post
jfrog

CVE-2025-6515 Prompt Hijacking Attack - How Session Hijacking Affects MCP Ecosystems

Oct 21, 2025 By Ori Hollander In JFrog
JFrog Security Research recently discovered and disclosed multiple CVEs in oatpp-mcp – the Oat++ framework’s implementation of Anthropic’s Model Context Protocol (MCP) standard. Among these, CVE-2025-6515 stood out due to its potential threat of hijacking MCP session IDs. Within the context of MCP we’ve dubbed this new attack technique “Prompt Hijacking“. Your browser does not support the video tag.
Read Post
Trustwave

Two Tools, One Strategy: Pairing Vulnerability Scanning and Pen Testing for Maximum Protection

Oct 20, 2025 By Mary Eduel Neyra In Trustwave
Penetration Testing and Managed Vulnerability Scanning (MVS) are often mentioned in the same breath, yet their true value emerges when they are combined. Each plays a distinct role in building a strong Offensive Security program, and together they form a powerful foundation for reducing risk and improving resilience. However, it is common for those not fully immersed in cybersecurity practices to either confuse or conflate these two practices.
Read Post
Corelight

Are you blind to the next big firewall exploit? Warning signs and lessons learned from the recent Cisco exploit

Oct 20, 2025 By David Burkett In Corelight
It feels like the security world is caught in a recurring cycle. We see a spike in strange scanning activity, file it away as internet background noise, and then weeks later, a major zero-day exploit drops, targeting the very technology that was being scanned. The recent Cisco ASA vulnerabilities were a textbook example of this pattern. A September 4, 2025, report from GreyNoise highlighted a massive surge in scanning, with over 25,000 unique IPs probing Cisco ASA devices.
Read Post
10 Common Vulnerabilities Found During Software Audits - and How to Fix Them

10 Common Vulnerabilities Found During Software Audits - and How to Fix Them

Oct 20, 2025 By SecuritySenses In SecuritySenses
A software audit is not a checklist but a thorough examination into the internal workings of your system that lurking vulnerabilities are usually hiding. Thousands of breaches every year are due to organizations not paying early attention to software audit vulnerabilities that might have been noticed and eliminated at an early stage. This article exposes the top ten vulnerabilities that are oftentimes encountered during software audits, why they occur, and offers some remediation measures that can be taken.
Read Post
outpost 24

Salesforce breach escalates: Qantas & Vietnam Airlines data leaked on dark web

Oct 17, 2025 By KrakenLabs In Outpost 24
The recent developments surrounding the Salesforce data breach serve as a stark reminder of the persistent threats organizations face. What began as a concerning incident earlier this summer has now escalated dramatically, with threat actors following through on their threats and releasing a substantial trove of Qantas customer data to the public.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.