Aggregator
CVE-2025-26864 | Apache IoTDB up to 1.3.3/2.0.2 OpenID Authentication log file (EUVD-2025-14874)
CVE-2025-3769 | Latepoint Plugin up to 5.1.92 on WordPress view_booking_summary_in_lightbox resource injection (EUVD-2025-14868)
CVE-2025-4430 | Naukowa i Akademicka Sieć Komputerowa EZD RP up to 20.18 /api/Token/gettoken authorization (EUVD-2025-14870)
CVE-2025-47445 | Themewinter Eventin Plugin up to 4.0.26 on WordPress path traversal (EUVD-2025-14869)
Samsung MagicINFO 9 Server Vulnerability Let Attackers Write Arbitrary File
Samsung has disclosed a critical security vulnerability (CVE-2025-4632) affecting its MagicINFO 9 Server platform, a widely deployed content management system used for digital signage across retail, transportation, healthcare, and corporate environments worldwide. The flaw allows unauthenticated attackers to write arbitrary files with system-level privileges, potentially leading to complete system compromise. Critical Path Traversal in Samsung […]
The post Samsung MagicINFO 9 Server Vulnerability Let Attackers Write Arbitrary File appeared first on Cyber Security News.
Researchers Unveil New Mechanism to Track Compartmentalized Cyber Threats
Cisco Talos, in collaboration with The Vertex Project, has introduced an innovative approach to tackle the rising complexity of compartmentalized cyber threats. As modern cyberattacks increasingly involve multiple threat actors executing distinct stages of an attack kill chain-such as initial access, exploitation, and ransomware deployment-traditional threat modeling frameworks like the Diamond Model have struggled to […]
The post Researchers Unveil New Mechanism to Track Compartmentalized Cyber Threats appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
Defensie verhoogt de Alert State
Adobe Photoshop Vulnerability Let Attackers Execute Arbitrary Code
Adobe has released critical security updates for Photoshop on both Windows and macOS platforms after discovering multiple severe vulnerabilities that could allow attackers to execute arbitrary code on victims’ systems. The security bulletin addresses three critical flaws affecting Photoshop 2025 (version 26.5 and earlier) and Photoshop 2024 (version 25.12.2 and earlier). Multiple Critical Flaws Discovered […]
The post Adobe Photoshop Vulnerability Let Attackers Execute Arbitrary Code appeared first on Cyber Security News.
Akira
You must login to view this content
Akira
You must login to view this content
CVE-2025-47292 | cap-collectif deserialization (GHSA-hf7r-rjh4-5fc8)
CVE-2025-2875 | Schneider Electric Modicon Controllers LMC058 URL external reference (SEVD-2025-133-01 / EUVD-2025-14678)
CVE-2025-3931 | Red Hat Enterprise Linux/Satellite Yggdrasil insufficient permissions or privileges (RHSA-2025:7592 / EUVD-2025-14867)
Russian military cadet reportedly arrested for selling hacking tool to FSB agent
New HTTPBot Botnet Rapidly Expands to Target Windows Machines
The HTTPBot Botnet, a novel Trojan developed in the Go programming language, has seen a sharp rise in activity since its first detection in August 2024. According to the latest findings from NSFOCUS Fuying Lab’s Global Threat Hunting system, HTTPBot has rapidly expanded its reach, particularly in April 2025, with over 200 attack instructions issued. […]
The post New HTTPBot Botnet Rapidly Expands to Target Windows Machines appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
CTM360 Identifies Surge in Phishing Attacks Targeting Meta Business Users
Alabama state government says cyber incident’s effects are limited, but response continues
Focused Phishing: Attack Targets Victims With Trusted Sites and Live Validation
Kosovar Man in Tampa Jail for Running Online Illicit Bazaar
A Kosovar man is being held in a Tampa, Florida, jail after being extradited on charges that he was the main administrator of an online illicit marketplace in operation since 2018. Prosecutors accused Liridon Masurica, 33, of being the force behind BlackDB.cc.