Aggregator

CVE-2025-49125 | Apache Tomcat up to 9.0.105/10.1.41/11.0.7 authentication bypass (EUVD-2025-18406)

VulDB Recent Entries
9 months 2 weeks ago
A vulnerability, which was classified as critical, was found in Apache Tomcat up to 9.0.105/10.1.41/11.0.7. This affects an unknown part. The manipulation leads to authentication bypass using alternate channel. This vulnerability is uniquely identified as CVE-2025-49125. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-48988 | Apache Tomcat up to 9.0.105/10.1.41/11.0.7 allocation of resources (EUVD-2025-18409)

VulDB Recent Entries
9 months 2 weeks ago
A vulnerability, which was classified as problematic, has been found in Apache Tomcat up to 9.0.105/10.1.41/11.0.7. Affected by this issue is some unknown functionality. The manipulation leads to allocation of resources. This vulnerability is handled as CVE-2025-48988. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

Former GCHQ Intern Jailed for Seven Years After Copying Top Secret Files to Mobile Phone

Cyber Security News
9 months 2 weeks ago

A former GCHQ intern has been sentenced to seven-and-a-half years in prison after copying top secret data files onto his mobile phone and taking them to his home computer, creating what prosecutors described as a significant risk to national security. Hasaan Arshad, 25, a computer science student from Rochdale, Greater Manchester, pleaded guilty at the […]

The post Former GCHQ Intern Jailed for Seven Years After Copying Top Secret Files to Mobile Phone appeared first on Cyber Security News.

Guru Baran

Anubis Ransomware Encrypts and Wipes Files, Making Recovery Impossible Even After Payment

The Hackers News
9 months 2 weeks ago
An emerging ransomware strain has been discovered incorporating capabilities to encrypt files as well as permanently erase them, a development that has been described as a "rare dual-threat." "The ransomware features a 'wipe mode,' which permanently erases files, rendering recovery impossible even if the ransom is paid," Trend Micro researchers Maristel Policarpio, Sarah Pearl Camiling, and
The Hacker News

CVE-2025-3446

CVE Trends
9 months 2 weeks ago
Currently trending CVE - Hype Score: 1 - Mattermost versions 10.6.x <= 10.6.1, 10.5.x <= 10.5.2, 10.4.x <= 10.4.4, 9.11.x <= 9.11.11 fail to check the correct permissions which allows authenticated users who only have permission to invite non-guest users to a team to add guest users to that team via the API to add a ...

Akira

Dark Feed IO
9 months 2 weeks ago

You must login to view this content

cohenido

Darknet Market Archetyp Takedown by Authorities in Joint Action ‘Operation Deep Sentinel’

Cyber Security News
9 months 2 weeks ago

International law enforcement agencies have successfully dismantled one of the world’s largest darknet marketplaces, “Archetyp Market,” in a coordinated operation that resulted in multiple arrests across Europe and the seizure of millions in criminal assets.  The operation, led by German authorities in collaboration with Spanish and Dutch police forces, represents a significant blow to the […]

The post Darknet Market Archetyp Takedown by Authorities in Joint Action ‘Operation Deep Sentinel’ appeared first on Cyber Security News.

Guru Baran

英国连锁店的面部识别系统错误识别一位女性为小偷

Solidot
9 months 2 weeks ago
一位英国女子被面部识别系统错误识别为偷盗了 10 英镑商品的小偷。 Danielle Horan 于 5 月和 6 月被英国连锁店 Home Bargains 的两家门店拒绝进入。第一次遭遇此事时她以为对方在开玩笑，在众目睽睽之下她不知所措。在抗议之后，门店经理建议她联络向连锁店提供面部识别技术的 Facewatch 公司。6 月 4 日她陪同母亲去了另一家 Home Bargains 门店，再次被店员围住要求离开，有了上次经验的她要求对此给出解释。在多次向 Facewatch 和 Home Bargains 发送电邮后，她才知道在 5 月 8 日她被指控偷了 10 英镑的卫生纸，在检查银行账户后她确认自己付款了。Facewatch 最后回应他们在审查之后确认她没有盗窃。该公司辩解称它依赖于门店提供的信息。公民自由运动组织 Big Brother Watch 的 Madeleine Stone 表示收到了超过 35 人的联络，投诉被错误列入了面部识别监视名单。她表示，英国在历史上一直认定，在被证明有罪之前你是无辜的；但当算法、摄像头和面部识别系统介入时，你就先被定罪了。

Lynx

Dark Feed IO
9 months 2 weeks ago

You must login to view this content

cohenido

Microsoft Outlook Users Face Crashes When Creating New Emails, Temp Fix Issued

Cyber Security News
9 months 2 weeks ago

Enterprise users of classic Microsoft Outlook are experiencing application crashes when attempting to create or open new emails, according to a technical advisory released by Microsoft today. The issue, which primarily affects virtual desktop infrastructure (VDI) environments, has been escalated for investigation by Microsoft’s technical support team. The problem is specifically affecting users of the […]

The post Microsoft Outlook Users Face Crashes When Creating New Emails, Temp Fix Issued appeared first on Cyber Security News.

Guru Baran

Managed ad