Aggregator

Ukraine’s military intelligence agency stole 4.4GB of highly classified internal data from Tupolev

Security Affairs
3 months 2 weeks ago
Ukraine’s GUR hacked the Russian aerospace and defense company Tupolev, stealing 4.4GB of highly classified internal data. Ukraine’s military intelligence agency GUR (aka HUR) claims the hack of the Russian aerospace and defense company Tupolev. According to Kyiv Post, Ukraine’s Military Intelligence compromised the United Aircraft Company (UAC) Tupolev division, which is a key developer […]
Pierluigi Paganini

CVE-2025-48934 | deno up to 2.1.12/2.2.12 Environment Variable deno.env.toObject insertion of sensitive information into sent data (EUVD-2025-16913)

VulDB Recent Entries
3 months 2 weeks ago
A vulnerability was found in deno up to 2.1.12/2.2.12. It has been declared as critical. This vulnerability affects the function deno.env.toObject of the component Environment Variable Handler. The manipulation leads to insertion of sensitive information into sent data. This vulnerability was named CVE-2025-48934. The attack can be initiated remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-48888 | deno up to 2.1.12/2.2.12/2.3.1 authorization

VulDB Recent Entries
3 months 2 weeks ago
A vulnerability was found in deno up to 2.1.12/2.2.12/2.3.1. It has been classified as problematic. This affects an unknown part. The manipulation leads to incorrect authorization. This vulnerability is uniquely identified as CVE-2025-48888. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-31136 | FreshRSS up to 1.26.1 SVG Favicon f.php fetch cross site scripting

VulDB Recent Entries
3 months 2 weeks ago
A vulnerability was found in FreshRSS up to 1.26.1 and classified as problematic. Affected by this issue is the function fetch of the file f.php of the component SVG Favicon Handler. The manipulation leads to cross site scripting. This vulnerability is handled as CVE-2025-31136. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-31134 | FreshRSS up to 1.26.1 insertion of sensitive information into sent data

VulDB Recent Entries
3 months 2 weeks ago
A vulnerability has been found in FreshRSS up to 1.26.1 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to insertion of sensitive information into sent data. This vulnerability is known as CVE-2025-31134. The attack can be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.
vuldb.com

From Idea to Outcome: How WWT Is Leading the AI Security Conversation at Scale

Security Boulevard
3 months 2 weeks ago

When it comes to helping the world’s largest enterprises navigate AI, cybersecurity and digital transformation, World Wide Technology (WWT) isn’t just participating, it’s leading. With a global workforce of over 12,000, and a deep bench of trusted technology partners, WWT has positioned itself as a rare blend of scale, security expertise and hands-on innovation. “Our..

The post From Idea to Outcome: How WWT Is Leading the AI Security Conversation at Scale appeared first on Security Boulevard.

John D. Boyle

Vishing Crew Targets Salesforce Data

darkreading
3 months 2 weeks ago
A group that Google is tracking as UNC6040 has been tricking users at many organizations into installing a malicious version of a Salesforce app to gain access and steal data from the platform.
Jai Vijayan, Contributing Writer

Microsoft Launches Free Security Program for European Governments

Security Boulevard
3 months 2 weeks ago

Microsoft is offering European countries a new cybersecurity program for free to help them defend against threats from nation-states like China and Russia, ransomware gangs, and AI-powered cyber threats through greater intelligence sharing, investments, and partnerships.

The post Microsoft Launches Free Security Program for European Governments appeared first on Security Boulevard.

Jeffrey Burt

CVE-2025-27487 | Microsoft Windows up to Server 2025 Remote Desktop Client heap-based overflow (EUVD-2025-10159 / Nessus ID 234237)

Vuldb Updates
3 months 2 weeks ago
A vulnerability has been found in Microsoft Windows and classified as critical. Affected by this vulnerability is an unknown functionality of the component Remote Desktop Client. The manipulation leads to heap-based buffer overflow. This vulnerability is known as CVE-2025-27487. The attack can be launched remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.
vuldb.com

CVE-2025-27737 | Microsoft Windows up to Server 2025 Security Zone Mapping input validation (EUVD-2025-10150)

Vuldb Updates
3 months 2 weeks ago
A vulnerability classified as critical has been found in Microsoft Windows. This affects an unknown part of the component Security Zone Mapping. The manipulation leads to improper input validation. This vulnerability is uniquely identified as CVE-2025-27737. Attacking locally is a requirement. There is no exploit available. It is recommended to apply a patch to fix this issue.
vuldb.com

Managed ad