Aggregator

Microsoft Teams New Update Enhances Productivity & Customization

Cyber Security News
3 months 1 week ago

Microsoft has announced a significant productivity enhancement coming to Microsoft 365 that will allow users to open core collaboration applications in separate windows, marking a major step forward in workspace customization and multitasking capabilities. The new feature, identified under Microsoft 365 Roadmap ID 495003, will enable users to launch essential applications such as Chat, Teams, […]

The post Microsoft Teams New Update Enhances Productivity & Customization appeared first on Cyber Security News.

Guru Baran

Sale of 23andMe: On the Hot Seat of Congress, States

Ransomware DataBreachToday.com
3 months 1 week ago
Lawmakers Quiz Execs on Security; State AG Seek to Block Sale of Bankrupt Firm
While a Congressional committee grilled 23andMe executives on Tuesday about security and privacy, 28 states filed a lawsuit to stop the sale of the bankrupt genetics testing firm unless the company obtains explicit consent from each customer for the transfer or their information to a third party.

300K Crash Reports Stolen in Texas DOT Hack

Ransomware DataBreachToday.com
3 months 1 week ago
Crash Records and Driver Data Exposed in Texas Transportation Hack
Hackers accessed the Texas Department of Transportation's crash records system using a compromised account, stealing nearly 300,000 reports containing personal and vehicle information that could be used for fraud, the department warned in a letter to impacted individuals.

How to Get a Clearer Picture of Vendor Risk

Ransomware DataBreachToday.com
3 months 1 week ago
Experts Call for Continuous Assessments of Vendor Risk - Not Just at Onboarding
As vendor ecosystems grow in complexity, many organizations still view third-party risk management as a static assessment of vendors as they're onboarded. But organizations often focus too heavily on upfront vetting of vendors and fail to track how their risk profiles may change over time.

CVE-2025-5485 | SinoTrack IOT PC Platform up to 8.6 Web Management Interface observable response discrepancy (icsa-25-160-01)

VulDB Recent Entries
3 months 1 week ago
A vulnerability was found in SinoTrack IOT PC Platform up to 8.6. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Web Management Interface. The manipulation leads to observable response discrepancy. This vulnerability is known as CVE-2025-5485. The attack can be launched remotely. There is no exploit available.
vuldb.com

CVE-2024-35295 | Siemens Perfect Harmony GH180 up to 8.3.2 missing authentication (ssa-771113 / EUVD-2024-54675)

VulDB Recent Entries
3 months 1 week ago
A vulnerability has been found in Siemens Perfect Harmony GH180 up to 8.3.2 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to missing authentication. This vulnerability was named CVE-2024-35295. It is possible to launch the attack on the physical device. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-5991 | Qt 6.9.0 QtNetwork Module QHttp2ProtocolHandler use after free (EUVD-2025-18092)

VulDB Recent Entries
3 months 1 week ago
A vulnerability, which was classified as critical, was found in Qt 6.9.0. This affects the function QHttp2ProtocolHandler of the component QtNetwork Module. The manipulation leads to use after free. This vulnerability is uniquely identified as CVE-2025-5991. The attack needs to be approached locally. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

2025轩辕杯CTF之web

先知技术社区
3 months 1 week ago
Webezweb查看网页源码，发下账号密码，fly233/123456789登录进去点击抓包，查看数据包猜测存在任意文件读取漏洞，直接读环境变量看看拿下flagezjs查看源码，看看main.js 直接向 getflag.php 发送 POST 请求即可Ezflask题目名可知为ssti注入 进入题目测试进一步验证​fenjing直接跑：{{''['__cla'+'ss__']['__ba'+'s

Microsoft Patches 67 Vulnerabilities Including WEBDAV Zero-Day Exploited in the Wild

The Hackers News
3 months 1 week ago
Microsoft has released patches to fix 67 security flaws, including one zero-day bug in Web Distributed Authoring and Versioning (WebDAV) that it said has come under active exploitation in the wild. Of the 67 vulnerabilities, 11 are rated Critical and 56 are rated Important in severity. This includes 26 remote code execution flaws, 17 information disclosure flaws, and 14 privilege escalation
The Hacker News

Managed ad