Aggregator

Lanvin Claims to have Leaked the Data of Taobento

A vulnerability was found in Observium CE 24.4.13528. It has been rated as problematic. This issue affects some unknown processing of the component VLAN Management. The manipulation leads to cross site scripting. The identification of this vulnerability is CVE-2024-47002. The attack may be initiated remotely. There is no exploit available.

A vulnerability classified as problematic has been found in Observium CE 24.4.13528. Affected is an unknown function of the component Weather Map Editor. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2024-45061. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability classified as problematic was found in Observium CE 24.4.13528. Affected by this vulnerability is the function add_alert_check. The manipulation leads to cross site scripting. This vulnerability is known as CVE-2024-47140. The attack can be launched remotely. There is no exploit available.

Февральский список угроз.

A vulnerability has been found in AMI AptioV up to BKS_5.38 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component BIOS. The manipulation leads to improper input validation. This vulnerability is known as CVE-2024-33659. It is possible to launch the attack on the local host. There is no exploit available.

DNI is Allegedly Selling Initial Access to Multiple Unidentified Companies in the USA

Google has stepped in to clarify that a newly introduced Android System SafetyCore app does not perform any client-side scanning of content. "Android provides many on-device protections that safeguard users against threats like malware, messaging spam and abuse protections, and phone scam protections, while preserving user privacy and keeping users in control of their data," a spokesperson for

Fortinet警告称，攻击者利用零日漏洞CVE-2025-24472劫持防火墙，获取超级管理员权限，入侵企业网络。

Gcore reported a 56% year-over-year rise in DDoS attacks in H2 2024, highlighting a steep long-term growth tend for the attack technique

Salt Typhoon underscores the urgent need for organizations to rapidly adopt modern security practices to meet evolving threats.

The popular generative AI (GenAI) model allows hallucinations, easily avoidable guardrails, susceptibility to jailbreaking and malware creation requests, and more at critically high rates, researchers find.