Aggregator

U.S. CISA adds Multiple Qualcomm chipsets flaws to its Known Exploited Vulnerabilities catalog

Security Affairs
3 months 2 weeks ago
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Multiple Qualcomm chipsets flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added multiple Qualcomm chipsets flaws to its Known Exploited Vulnerabilities (KEV) catalog. This week, Qualcomm addressed the above zero-day vulnerabilities that, according to the company, have been exploited in limited, […]
Pierluigi Paganini

HW持续招人-缺中级

迪哥讲事
3 months 2 weeks ago
招聘岗位：网络安全工程师要求：1.至少是24年毕业的，还在学校的不要投简历了!2.参加多次护网，做过溯源应急岗位的 , 会写技战法。

CVE-2025-5539 | Simplify Contact Management Plugin up to 4.0.0 on WordPress Shortcode emd_mb_meta cross site scripting (EUVD-2025-16817)

Vuldb Updates
3 months 2 weeks ago
A vulnerability was found in Simplify Contact Management Plugin up to 4.0.0 on WordPress and classified as problematic. This issue affects the function emd_mb_meta of the component Shortcode Handler. The manipulation leads to cross site scripting. The identification of this vulnerability is CVE-2025-5539. The attack may be initiated remotely. There is no exploit available.
vuldb.com

CVE-2025-5569 | IdeaCMS up to 1.7 getList.html Article/Goods Field sql injection (ICBVWE / EUVD-2025-16845)

Vuldb Updates
3 months 2 weeks ago
A vulnerability was found in IdeaCMS up to 1.7 and classified as critical. This issue affects the function Article/Goods of the file /api/v1.index.article/getList.html. The manipulation of the argument Field leads to sql injection. The identification of this vulnerability is CVE-2025-5569. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

OpenAI 董事会短暂解雇 CEO Sam Altman 的故事被搬上银幕

Solidot
3 months 2 weeks ago
2023 年 11 月 OpenAI 董事会出其不意的宣布解雇 CEO Sam Altman，但五天之后 Altman 又重返公司，原董事会成员大部分在一年之内都陆续离开。OpenAI 董事会是认为 Altman 有滥权和操纵行为后而决定将其解雇，他们认为此举是履行其义务。在一年半之后，亚马逊米高梅影业正准备将这次事件搬上大银幕。影星 Andrew Garfield 将出演 Altman(他参演过《社交网络》)，Monica Barbaro 出演 CTO Mira Murat，Yura Borisov 出演领导罢免行动的联合创始人 Ilya Sutskever。Heyday Films 的 David Heyman 和 Jeffrey Clifford 将担任制片人，Simon Rich 担任编剧。亚马逊计划今年夏天开拍。

Threat Actor Bribes Overseas Support Agents to Steal Coinbase Customer Data

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
3 months 2 weeks ago

On May 15, 2025, Coinbase, the largest U.S. cryptocurrency exchange, publicly disclosed a major security breach that exposed the sensitive personal data of 69,461 users—less than 1% of its monthly transacting base, but a significant figure given the depth of information compromised. This incident was not a typical crypto hack exploiting blockchain vulnerabilities; instead, it […]

The post Threat Actor Bribes Overseas Support Agents to Steal Coinbase Customer Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Anupriya

Gunra

Dark Feed IO
3 months 2 weeks ago

You must login to view this content

cohenido

CVE-2025-20988 | Samsung Devices Fingerprint Trustlet out-of-bounds (EUVD-2025-16832)

Vuldb Updates
3 months 2 weeks ago
A vulnerability, which was classified as problematic, has been found in Samsung Devices. Affected by this issue is some unknown functionality of the component Fingerprint Trustlet. The manipulation leads to out-of-bounds read. This vulnerability is handled as CVE-2025-20988. The attack needs to be approached locally. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-24015 | denoland deno up to 2.1.6 Authentication Tag set_aad signature verification (GHSA-2x3r-hwv5-p32x / EUVD-2025-16794)

Vuldb Updates
3 months 2 weeks ago
A vulnerability, which was classified as problematic, has been found in denoland deno up to 2.1.6. This issue affects the function set_aad of the component Authentication Tag Handler. The manipulation leads to improper verification of cryptographic signature. The identification of this vulnerability is CVE-2025-24015. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

Managed ad