Jenkins Host key reuse in SSH build agent Docker images (CVE-2025-32754 and CVE-2025-32755)
CVE numbers CVE-2025-32754 and CVE-2025-32755. In jenkins/ssh-slave Docker images based on Debian, SSH host keys are generated on image creation
Read MoreCyber Security
Articles on SystemTek’s website that relate to cyber security.
Warning issued over MOONSHINE and BADBAZAAR malware
MOONSHINE and BADBAZAAR are examples of apps that embed harmful functionalities within seemingly legitimate software—a method known as trojanising.
Read More
Fortinet FortiWeb cgi_xmlprotection_xmlschemafile_post Directory Traversal Arbitrary File Write Vulnerability (CVE-2024-55597)
This vulnerability allows remote attackers to create arbitrary XML schema files on affected installations of Fortinet FortiWeb.
Read More
Trend Micro Cleaner One Pro Link Following Denial-of-Service Vulnerability (CVE-2025-27529)
This vulnerability (CVE-2025-27529) allows local attackers to create a denial-of-service condition on affected installations of Trend Micro Cleaner One Pro.
Read More
Multiple Australian superannuation funds targeted in a coordinated cyberattack
Multiple Australian superannuation funds have been targeted in a coordinated cyberattack that has compromised thousands of accounts and resulted in some members losing thousands in savings.
Read More
Autodesk Navisworks Freedom DWFX File Parsing Memory Corruption Remote Code Execution Vulnerability (CVE-2025-1660)
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Navisworks Freedom.
Read More
Cisco Enterprise Chat and Email Denial of Service Vulnerability (CVE-2025-20139)
A vulnerability in chat messaging features of Cisco Enterprise Chat and Email (ECE) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition.
Read MoreCisco Meraki MX and Z Series AnyConnect VPN Denial of Service Vulnerability (CVE-2025-20212)
A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series devices could allow an authenticated, remote attacker to cause a denial of service (DoS) condition in the Cisco AnyConnect service on an affected device.
Read More
Zabbix server DoS vulnerability (CVE-2024-45700)
CVE-2024-45700 – Zabbix server is vulnerable to a DoS vulnerability due to uncontrolled resource exhaustion.
Read More
Apple macOS AudioToolboxCore WAV File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVE-2025-24244)
CVE-2025-24244 – This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS.
Read More