Aggregator

A vulnerability has been found in LabRedesCefetRJ WeGIA up to 3.2.9 and classified as critical. This vulnerability affects unknown code of the file adicionar_especie.php. The manipulation leads to sql injection. This vulnerability was named CVE-2025-23218. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in LabRedesCefetRJ WeGIA up to 3.2.9 and classified as critical. This issue affects some unknown processing of the file adicionar_cor.php. The manipulation leads to sql injection. The identification of this vulnerability is CVE-2025-23219. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Brave Desktop Browser up to 1.70.116/1.74.47. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to improper restriction of rendered ui layers. This vulnerability was named CVE-2025-23086. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Tecno com.transsion.carlcare 6.2.8.1. It has been declared as problematic. This vulnerability affects unknown code of the component Setting Handler. The manipulation leads to incorrect permission assignment. This vulnerability was named CVE-2025-0590. The attack can be initiated remotely. There is no exploit available.

An analysis of the operations

An analysis of the operations of Hunters International, the ransomware-as-a-service platform that has been used to compromise more than 200 organizations, conducted by Forescout Technologies reveals the cybercriminal syndicate that created it is employing a wide range of new and old tactics and techniques.

The post Forescout Report Detail Hunters International Ransomware Gang Tactics appeared first on Security Boulevard.

Meta、Google、TikTok 和 X 都向欧盟承诺将采取更多措施防止和移除其平台上的非法仇恨言论。社交平台如 Facebook、Instagram、TikTok、Twitch、X、YouTube、Snapchat、LinkedIn、Dailymotion、Jeuxvideo.com、Rakuten Viber 和微软的消费者服务都签署了欧盟的行为准则 Code of Conduct on Countering Illegal Hate Speech Online Plus。欧盟专员 Michael McGrath 在一份声明中表示，仇恨和极化是对欧盟价值观和基本权利的威胁，破坏了民主国家的稳定。互联网正在放大仇恨言论的负面影响。欧盟行为准则是自愿性质，社交公司如果退出并不会有任何惩罚。

A vulnerability was found in Picture Gallery Plugin up to 1.5.19 on WordPress. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting. This vulnerability is known as CVE-2024-13584. The attack can be launched remotely. There is no exploit available.

A vulnerability was found in WP-Polls Plugin up to 2.77.2 on WordPress. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2024-13426. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability was found in PluginOps MailChimp Subscribe Forms Plugin up to 4.1 on WordPress and classified as problematic. This issue affects some unknown processing. The manipulation leads to cross site scripting. The identification of this vulnerability is CVE-2025-22727. The attack may be initiated remotely. There is no exploit available.

A vulnerability has been found in Brizy Pro Plugin up to 2.6.1 on WordPress and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross site scripting. This vulnerability was named CVE-2025-22763. The attack can be initiated remotely. There is no exploit available.

A vulnerability, which was classified as problematic, was found in Private Messages for UserPro Plugin up to 4.10.0 on WordPress. This affects an unknown part. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2025-22322. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability, which was classified as problematic, has been found in Poll Maker Plugin up to 5.5.4 on WordPress. Affected by this issue is some unknown functionality. The manipulation leads to escaping of output. This vulnerability is handled as CVE-2024-56277. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Fancy Product Designer Plugin up to 6.4.3 on WordPress. Affected by this vulnerability is an unknown functionality. The manipulation leads to unrestricted upload. This vulnerability is known as CVE-2024-51919. The attack can be launched remotely. There is no exploit available.

A vulnerability classified as problematic has been found in PPO Việt Nam PPO Call to Actions Plugin up to 0.1.3 on WordPress. Affected is an unknown function. The manipulation leads to cross-site request forgery. This vulnerability is traded as CVE-2025-24001. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability was found in Rara Theme UltraLight Plugin up to 1.2 on WordPress. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to cross site scripting. The identification of this vulnerability is CVE-2025-23998. The attack may be initiated remotely. There is no exploit available.

Set for release in March, Cisco AI Defense will provide algorithmic red teaming of large language models with technology that came over as part of the Robust Intelligence acquisition last year.

AI SPERA announced today that it has partnered with education platform OnTheHub to provide its integrated cybersecurity solution, Criminal IP, to students and educational institutions. [...]

Entrust introduced AI-powered identity verification as a new capability for its Identity-as-a-Service (IDaaS) platform. As cyber threats evolve and grow more sophisticated, businesses are facing escalating risks and financial losses. In 2024, US businesses lost an estimated $112 billion to fraud, the equivalent of nearly 7% of their revenue. Modern attacks, such as deepfakes, synthetic identities, and advanced phishing campaigns leveraging AI render traditional security measures increasingly insufficient. The 2025 Identity Fraud Report revealed digital … More →

The post Entrust unveils AI-powered facial biometric authentication capability appeared first on Help Net Security.