Aggregator

Cryptocurrency trading platform Coinbase said an attacker tried to extort the company for $20 million over stolen data. "We said no," Coinbase said, and instead offered that amount as a bounty.

A vulnerability was found in defog-ai introspect up to 0.1.4. It has been rated as critical. Affected by this issue is the function test_custom_tool of the file introspect/backend/integration_routes.py of the component Test Endpoint. The manipulation of the argument input_model leads to code injection. This vulnerability is handled as CVE-2025-4767. Attacking locally is a requirement. Furthermore, there is an exploit available.

Submit #571385 / VDB-307432

2025-05-15T12:24:59.648560Z 0 [Warning] [MY-011068] [Se […]

A vulnerability was found in PHPGurukul Zoo Management System 2.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/profile.php. The manipulation of the argument contactnumber leads to sql injection. This vulnerability is known as CVE-2025-4766. The attack can be launched remotely. Furthermore, there is an exploit available.

A vulnerability was found in PHPGurukul Zoo Management System 2.1. It has been classified as critical. Affected is an unknown function of the file /admin/contactus.php. The manipulation of the argument mobnum leads to sql injection. This vulnerability is traded as CVE-2025-4765. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

Your pentest came back clean—now what? Learn how to use a zero-findings report to improve threat detection, validate scope, and drive your security strategy forward.

As a senior UX designer at Tidal Cyber, I often field questions from other designers and cybersecurity industry colleagues on how to work effectively in a lean team environment. Lean teams typically operate with a ratio of one designer for every 10 to 20 developers. So, it requires a lot of multi-tasking, context-switching, and cross-team collaboration that can be challenging to navigate. 

The post Small but Mighty: UX Design Tips for a Lean Team Environment appeared first on Security Boulevard.

The voluntary cybersecurity charter asks NHS suppliers to commit to eight cybersecurity pledges, amid rising attacks on healthcare

Submit #571363 / VDB-309068

A vulnerability was found in Lleidanet PKI eSigna up to 5.4.0 and classified as problematic. This issue affects some unknown processing of the component SignaViewer Component. The manipulation leads to authorization bypass. The identification of this vulnerability is CVE-2025-4762. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

Submit #571351 / VDB-309067

Submit #571345 / VDB-309066

A vulnerability has been found in ArcGIS and classified as critical. Affected by this vulnerability is an unknown functionality of the component client_credentials OAuth 2.0 API. The manipulation leads to violation of secure design principles. This vulnerability is known as CVE-2025-0020. The attack can be launched remotely. Furthermore, there is an exploit available. This product is available as a managed service. Users are not able to maintain vulnerability countermeasures themselves.

Submit #571341 / VDB-307407

Submit #571336 / VDB-307485

Submit #571326 / VDB-307476

A vulnerability, which was classified as critical, has been found in TicketBAI Facturas para WooCommerce Plugin up to 3.18 on WordPress. Affected by this issue is some unknown functionality of the file wp-config.php. The manipulation leads to denial of service. This vulnerability is handled as CVE-2025-4564. The attack may be launched remotely. There is no exploit available.

A vulnerability was found in Lleidanet PKI eSigna up to 5.4.0. It has been classified as problematic. Affected is an unknown function of the component eSignaViewer. The manipulation leads to path traversal. This vulnerability is traded as CVE-2024-12014. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

Credential protection is key to preventing breaches. Secure APIs, rotate secrets and train devs to handle credentials safely…