Aggregator

CVE-2021-47797 | Leawo Prof. Media 11.0.0.1 Registration Interface activation keycode buffer overflow (Exploit 50153 / EDB-50153)

VulDB Recent Entries
3 months 1 week ago
A vulnerability, which was classified as critical, was found in Leawo Prof. Media 11.0.0.1. This impacts an unknown function of the component Registration Interface. Such manipulation of the argument activation keycode leads to buffer overflow. This vulnerability is traded as CVE-2021-47797. An attack has to be approached locally. Furthermore, there is an exploit available.
vuldb.com

微软关闭员工图书馆削减数字订阅

Solidot
3 months 1 week ago
微软内部曾有传说，员工图书馆内的藏书是如此之重，以至于建筑物都下沉了。然而如今实体图书馆行将消失，而数字订阅也将削减。微软正在转向“AI 驱动的学习体验”。微软是从去年 11 月起开始通知出版商取消订阅，已订阅了 22 年的 Strategic News Service(SNS)不再是微软的订阅服务之一。微软员工称，他们无法再访问 The Information 等数字出版物，无法再从图书馆借阅商业书籍。

Actively exploited critical flaw in Modular DS WordPress plugin enables admin takeover

Security Affairs
3 months 1 week ago
A critical Modular DS WordPress flaw (CVE-2026-23550) is actively exploited, enabling unauthenticated privilege escalation. Threat actors are actively exploiting a critical Modular DS WordPress vulnerability tracked as CVE-2026-23550 (CVSS score of 10). Modular DS is a WordPress plugin with over 40,000 installs that helps manage multiple sites, enabling monitoring, updates, and remote administration. In plugin […]
Pierluigi Paganini

Defensie levert eerste weerbare lichting civiele ‘die hards’ af

Defensie.nl - Nieuwsberichten
3 months 1 week ago
Kracht, doorzettingsvermogen en discipline kwamen gisterenavond bijeen tijdens een fysieke én mentale uitdaging. Het vormde het ‘slotakkoord’ van een Nationale Weerbaarheidstraining (NWT). In militair tenue, compleet met helm, bepakking en scherfwerend vest trotseerden meer dan 100 deelnemers kou, sneeuw, regen en modder tijdens hun 5 kilometer tellende eindmars. Daarmee heeft deze groep de eerste editie van NWT succesvol afgerond. 22 januari krijgen de leden hun baret.

FalconStor Habanero simplifies compliant offsite backup for IBM Power users

Help Net Security
3 months 1 week ago

FalconStor Software announced the launch of FalconStor Habanero, a globally available software-as-a-service offering designed to simplify secure offsite data protection for IBM Power customers. Habanero addresses a critical challenge facing the majority of IBM Power users: organizations that continue to run mission-critical workloads on-premises but require secure, compliant, and resilient offsite copies of their data. By integrating directly with existing IBM Power workloads, backup applications, and established operational processes, Habanero enables customers to establish enterprise-grade … More →

The post FalconStor Habanero simplifies compliant offsite backup for IBM Power users appeared first on Help Net Security.

Industry News

CISA, Allies Sound Alarm on OT Network Exposure

Ransomware DataBreachToday.com
3 months 1 week ago
Joint US, UK and Five Eyes Guidance Flags OT Exposure as National Risk
U.S. and allied cyber agencies issued new guidance warning that insecure operational technology connectivity - driven by remote access, third-party vendors and IT integration - remains a major threat vector, enabling cyber intrusions to escalate into physical disruptions.

Breach Roundup: Software Update Caused Verizon Outage

Ransomware DataBreachToday.com
3 months 1 week ago
Also, Venezuela Cyberattack, Endesa Confirms Breach and Telegram IP Leak
This week, a software flaw caused the Verizon outage. U.S. cyberattack in Venezuela. ICE identities published online. BreachForums users leaked. Spanish energy provider Endesa data breach. Telegram privacy risk. A MuddyWater upgrade. Dutch man sentenced for hacking a maritime port. A ServiceNow patch.

Torq Gets $140M Series D to Fuel AI-Powered SOC Capabilities

Ransomware DataBreachToday.com
3 months 1 week ago
Funding at $1.2B Valuation to Propel Federal Market Entry and R&D in GenAI
Torq secured $140 million in Series D funding at a $1.2 billion valuation to expand its generative AI-powered security operations platform. With backing from Merlin Ventures, Torq will grow internationally, deepen AI research and pursue U.S. federal opportunities including FedRAMP certification.

CIO Playbook for Post-Quantum Security

Ransomware DataBreachToday.com
3 months 1 week ago
Forrester's Sandy Carielli on Quantum Readiness, Key Steps for Successful Migration
Quantum security migrations are multi-year, cross-functional projects that touch product, infrastructure and supply chains. While the scope of migration can be daunting, CIOs can follow several practical steps to make the project more manageable, said Forrester's Sandy Carielli.

Google Rolls Out Long-Awaited @gmail.com Email Change Feature for Users

Cyber Security News
3 months 1 week ago

Google is gradually rolling out the ability to change the @gmail.com email address associated with a Google Account to a new @gmail.com address. This feature, previously unavailable, addresses a common pain point for users who regret their original username choice but didn’t want to abandon years of emails, photos, and data. We already notified you […]

The post Google Rolls Out Long-Awaited @gmail.com Email Change Feature for Users appeared first on Cyber Security News.

Guru Baran

长期接触低浓度农药缩短野生鱼类寿命

Solidot
3 months 1 week ago
中国研究人员在《科学》期刊上发表一项研究，发现即使在监管框架认为安全的剂量下，长期接触农药毒死蜱（chlorpyrifos）也会加速野生鱼类的生理衰老过程并缩短其寿命。这些发现引发了人们对农药长期低度污染环境影响的担忧。为评估接触低浓度农药会对野生鱼类产生何种影响，武汉研究人员将对中国湖泊中 2 万 4388 条达氏鲌（Culter Dabryi）的野外观测（这些湖泊持续存在低浓度的常见农药毒死蜱）与实验室中的实验相结合，发现来自受农药污染湖泊的鱼类会出现端粒缩短；它们还会呈现以年轻个体为主的被截断的种群结构，表明长期接触低剂量的毒死蜱与生理衰老过程加速及寿命缩短有关。这些发现也在实验室中得到证实。

CVE-2025-38607 | Linux Kernel up to 6.15.9/6.16.0 bpf verifier.c can_jump privilege escalation (WID-SEC-2025-1869)

Vuldb Updates
3 months 1 week ago
A vulnerability, which was classified as problematic, was found in Linux Kernel up to 6.15.9/6.16.0. This affects the function can_jump of the file verifier.c of the component bpf. Such manipulation leads to privilege escalation. This vulnerability is referenced as CVE-2025-38607. The attack needs to be initiated within the local network. No exploit is available. You should upgrade the affected component.
vuldb.com

Managed ad