Aggregator

Cybersecurity researchers have discovered a bypass for a now-patched security vulnerability in the NVIDIA Container Toolkit that could be exploited to break out of a container's isolation protections and gain complete access to the underlying host. The new vulnerability is being tracked as CVE-2025-23359 (CVSS score: 8.3). It affects the following versions - NVIDIA Container Toolkit (All

Молодые специалисты нашли общий язык с Copilot там, где опытные сдались.

Sonar achieves SOC 2 Type II compliance, reflecting its dedication to protecting customer data and ensuring the integrity of its operations now and in the future.

The post Sonar Earns SOC 2 Type II Compliance appeared first on Security Boulevard.

Encryption Consulting announced significant updates to its CodeSign Secure platform, a comprehensive code-signing solution designed to address the challenges of software security in modern development environments. As organizations prioritize software integrity, authenticity, and compliance, the complexities of managing secure code-signing processes have grown. CodeSign Secure’s latest enhancements support development teams in signing a broader range of files, streamlining workflows, and ensuring compliance with industry standards while maintaining high levels of security. Expanding capabilities to meet … More →

The post Encryption Consulting enhances CodeSign Secure platform appeared first on Help Net Security.

zkLend, a prominent decentralized finance (DeFi) protocol built on Ethereum’s Layer-2 zk-rollup technology, has fallen victim to a major security breach resulting in the theft of approximately 3,300 ETH, valued at around $8.5 million at current market prices.  Unexpectedly, zkLend has publicly contacted the attacker, offering a 10% whitehat bounty—equivalent to 330 ETH ($850,000)—in exchange […]

The post zkLend Hacked – $8.5M Stolen, Company offers 10% whitehat Bounty to Attacker appeared first on Cyber Security News.

A critical vulnerability in YouTube’s infrastructure allowed attackers to expose the email addresses tied to anonymous channels by combining flaws in Google’s account management system and an outdated Pixel Recorder API. The exploit chain, discovered by security researchers Brutecat and Nathan, leveraged YouTube’s internal user-blocking feature and a misconfigured cloud service to bypass privacy protections, […]

The post New YouTube Bug Exploited to Leak Users’ Email Addresses appeared first on Cyber Security News.

调查显示 31% 开发者将修复漏洞列为首要任务，AI 正成为安全左移的加速器。