Aggregator

A vulnerability was found in Linux Kernel up to 6.6.82/6.12.17/6.13.5. It has been declared as critical. The affected element is an unknown function of the component enetc. The manipulation results in denial of service. This vulnerability is identified as CVE-2025-21894. The attack can only be performed from the local network. There is not any exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in Linux Kernel up to 6.1.6. This vulnerability affects the function bitmap_ip_create of the component netfilter. Executing manipulation can lead to insufficiently random values. The identification of this vulnerability is CVE-2023-53032. The attack needs to be done within the local network. There is no exploit available. You should upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 6.6.80/6.12.17/6.13.5 and classified as critical. The affected element is the function perf_event_swap_task_ctx_data. The manipulation leads to excessive iteration. This vulnerability is uniquely identified as CVE-2025-21895. The attack can only be initiated within the local network. No exploit exists. The affected component should be upgraded.

A vulnerability labeled as problematic has been found in Linux Kernel up to 6.12.18/6.13.6. Affected is the function poll_cci of the file drivers/usb/typec/ucsi/ucsi.c. Executing manipulation can lead to reachable assertion. This vulnerability is registered as CVE-2025-21902. The attack requires access to the local network. No exploit is available. The affected component should be upgraded.

A vulnerability has been found in Linux Kernel up to 6.13.1 and classified as problematic. Affected is the function intel_sanitize_encoder. The manipulation leads to state issue. This vulnerability is uniquely identified as CVE-2024-58074. The attack can only be initiated within the local network. No exploit exists. The affected component should be upgraded.

Throughout the first half of 2025, financially motivated threat actors have shifted their approach to intrusions, abandoning traditional implant-heavy methods in favor of a more cost-effective strategy. Rather than deploying sophisticated malware payloads, attackers are leveraging stolen credentials and valid account access to establish persistence within target networks across multiple industries. The FortiGuard Incident Response […]

The post Stolen Credentials and Valid Account Abuse Fuel the Financially Motivated Attacks appeared first on Cyber Security News.

Authors, Creators & Presenters: Sena Sahin (Georgia Institute of Technology), Burak Sahin (Georgia Institute of Technology), Frank Li (Georgia Institute of Technology)

PAPER Was This You? Investigating the Design Considerations for Suspicious Login Notifications

Many online platforms monitor the account login activities of their users to detect unauthorized login attempts. Upon detecting anomalous activity, these platforms send suspicious login notifications to their users. These notifications serve to inform users about the login activity in sufficient detail for them to ascertain its legitimacy and take remedial actions if necessary. Despite the prevalence of these notifications, limited research has explored how users engage with them and how they can be effectively designed. In this paper, we examine user engagement with email-based suspicious login notifications, focusing on real-world practices. We collect and analyze notifications currently in use to establish an empirical foundation for common design elements. We focus our study on designs used by online platforms rather than exploring all possible design options. Thus, these design options are likely supported by real-world online platforms based on the login data they can realistically provide. Then, we investigate how these design elements influence users to read the notification, validate its authenticity, diagnose the login attempt, and determine appropriate remedial steps. By conducting online semi-structured interviews with 20 US-based participants, we investigate their past experiences and present them with design elements employed by top online platforms to identify what design elements work best. Our findings highlight the practical design options that enhance users' understanding and engagement, providing recommendations for deploying effective notifications and identifying future directions for the security community.

Our thanks to the Network and Distributed System Security (NDSS) Symposium for publishing their Creators, Authors and Presenter’s superb NDSS Symposium 2025 Conference content on the organization’s’ YouTube channel.

Permalink

The post NDSS 2025 – Was This You? Investigating the Design Considerations for Suspicious Login Notifications appeared first on Security Boulevard.

An FCC ruling issued days before Donald Trump took office was an "ineffective response" to the Salt Typhoon intrusions into U.S. telecom networks, the agency's new leadership said in announcing plans to rescind it.

A vulnerability marked as critical has been reported in ORing IAP-420 up to 2.01e. The affected element is an unknown function of the component SNMP. This manipulation causes command injection. This vulnerability is tracked as CVE-2024-55547. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability described as critical has been identified in ORing IAP-420 up to 2.01e. The impacted element is an unknown function. Such manipulation leads to command injection. This vulnerability is listed as CVE-2024-55544. The attack may be performed from remote. There is no available exploit.

A vulnerability classified as problematic has been found in ORing IAP-420 up to 2.01e. This affects an unknown function. Performing manipulation results in cross site scripting. This vulnerability is cataloged as CVE-2024-55546. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability classified as problematic was found in ORing IAP-420 up to 2.01e. This impacts an unknown function. Executing manipulation can lead to cross site scripting. This vulnerability is registered as CVE-2024-55545. It is possible to launch the attack remotely. No exploit is available.

A vulnerability, which was classified as problematic, has been found in ORing IAP-420 up to 2.01e. Affected is an unknown function. The manipulation leads to improper check or handling of exceptional conditions. This vulnerability is documented as CVE-2024-55548. The attack can be initiated remotely. There is not any exploit available.

A vulnerability, which was classified as problematic, has been found in Linux Kernel up to 6.12.18/6.13.6. Affected is the function unmap_poisoned_folio of the component memory-failure. This manipulation causes state issue. This vulnerability appears as CVE-2025-21907. The attacker needs to be present on the local network. There is no available exploit. It is advisable to upgrade the affected component.

A vulnerability labeled as problematic has been found in Linux Kernel up to 6.12.18/6.13.6. This affects the function iwl_mvm_roc_finished of the component iwlwifi. The manipulation results in information disclosure. This vulnerability is cataloged as CVE-2025-21906. The attack must originate from the local network. There is no exploit available. The affected component should be upgraded.

A vulnerability described as problematic has been identified in Linux Kernel up to 6.13.6. This issue affects some unknown processing of the component nl80211. Such manipulation leads to state issue. This vulnerability is documented as CVE-2025-21909. The attack requires being on the local network. There is not any exploit available. Upgrading the affected component is recommended.

A vulnerability classified as problematic was found in Linux Kernel up to 6.13.6. Affected by this vulnerability is the function regulatory_hint_user of the component cfg80211. The manipulation of the argument user_alpha2[] results in information disclosure. This vulnerability is known as CVE-2025-21910. Access to the local network is required for this attack. No exploit is available. Upgrading the affected component is advised.

A vulnerability marked as critical has been reported in Trend Micro Apex One and Apex One as a Service. Affected is an unknown function of the component Rollback Handler. The manipulation leads to improper input validation. This vulnerability is uniquely identified as CVE-2022-40139. The attack is possible to be carried out remotely. Moreover, an exploit is present.

Oleksii Lytvynenko, 43, was arrested in Ireland in 2023 and extradited to the U.S. earlier this month. He pleaded not guilty in federal court Thursday.

The post Ukrainian allegedly involved in Conti ransomware attacks faces up to 25 years in jail appeared first on CyberScoop.