Critical WD My Cloud bug allows remote command injection

Published on September 30, 2025

Western Digital has released firmware updates for multiple My Cloud NAS models to patch a critical-severity vulnerability that could be exploited remotely to execute arbitrary system commands. [...]

Continue reading on website
Other news

Chinese hackers exploiting VMware zero-day since October 2024

September 30, 2025
Broadcom has patched a high-severity privilege escalation vulnerability in its VMware Aria Operations and VMware Tools software, which has been exploited in zero-day attacks since October 2024. [...]

Phantom Taurus: New China-Linked Hacker Group Hits Governments With Stealth Malware

September 30, 2025
Government and telecommunications organizations across Africa, the Middle East, and Asia have emerged as the target of a previously undocumented China-aligned nation-state actor dubbed Phantom Taurus over the past two-and-a-half years."Phantom Taurus' main focus areas include ministries of foreign affairs, embassies, geopolitical events, and military operations," Palo Alto Networks Unit 42