Skip to content

Priyanka Aash

Priyanka has 10+ years of experience in Strategy, Community Building & Inbound Marketing and through CISO Platform has earlier worked with marketing teams of IBM, VMware, F5 Networks, Barracuda Network, Checkpoint, and more. Priyanka is passionate about Entrepreneurship and Enterprise Marketing Strategy. Earlier she co-founded CISO Platform- the world’s 1st online platform for collaboration and knowledge sharing among senior information security executives.

Fortinet FortiWeb Vulnerability (CVE-2025-25257)

On July 8, 2025, Fortinet disclosed active exploitation of CVE-2025-25257, a critical SQL injection vulnerability in FortiWeb. The flaw resides in the Fabric Connector module and allows unauthenticated attackers to execute arbitrary database commands through specially crafted HTTP or HTTPS requests. Exploited systems included FortiWeb instances directly exposed to the internet. Date of Incident: July 8,… Read More »Fortinet FortiWeb Vulnerability (CVE-2025-25257)

Citrix NetScaler ADC and Gateway Vulnerability (CVE-2025-5777): Securing Remote Access Gateways

On July 10, 2025, CISA confirmed active exploitation of a critical vulnerability in Citrix NetScaler ADC and Gateway, identified as CVE-2025-5777. The flaw, dubbed Citrix Bleed 2, allows attackers to bypass authentication in configurations using Gateway or AAA virtual servers. Following confirmation, the vulnerability was added to the CISA Known Exploited Vulnerabilities (KEV) catalog, prompting… Read More »Citrix NetScaler ADC and Gateway Vulnerability (CVE-2025-5777): Securing Remote Access Gateways

Wing FTP Server Vulnerability (CVE-2025-47812)

On July 7, 2025, a critical vulnerability in Wing FTP Server was actively exploited in the wild. Identified as CVE-2025-47812 and carrying a maximum CVSS score of 10.0, the flaw allows unauthenticated attackers to execute arbitrary system commands through the product’s web interface. Security researcher Julien Ahrens discovered the issue, which originates from improper null… Read More »Wing FTP Server Vulnerability (CVE-2025-47812)

Weekly Report: New Hacking Techniques and Critical CVEs July 2-10, 2025

The week of July 2-10, 2025 witnessed significant escalation in cybersecurity threats with multiple critical incidents affecting major organizations globally. The period was marked by sophisticated ransomware attacks targeting critical infrastructure, critical zero-day vulnerabilities under active exploitation, and emergence of new APT campaigns targeting government entities. Key developments include the SafePay ransomware attack on global… Read More »Weekly Report: New Hacking Techniques and Critical CVEs July 2-10, 2025

Weekly Cybersecurity Intelligence Report Cyber Threats & Breaches: July 02-09, 2025

Between July 2 and July 10, 2025, the cybersecurity landscape was marked by high-impact ransomware attacks, critical vulnerabilities in widely used platforms, and advanced persistent threat (APT) campaigns targeting government and enterprise sectors. This report provides an authoritative, technically exhaustive breakdown of each incident, strictly covering only those breaches and attacks that occurred within this… Read More »Weekly Cybersecurity Intelligence Report Cyber Threats & Breaches: July 02-09, 2025

Firecompass ranked #1 AI on HackerOne. Read more →