Aggregator
Google to Shut Down Dark Web Monitoring Tool in February 2026
嘶吼安全快报—2025.12.16
勒索软件团伙滥用Shanya可执行文件打包器隐匿EDR禁用工具
速修!帆软 FineReport 前台远程代码执行漏洞
Product showcase: GlassWire mobile firewall for Android
GlassWire is a free network monitoring and security application for Windows and Android. It lets you see how your system communicates over the internet and local network. The Windows version also offers a Premium tier with advanced features, while the Android app focuses on monitoring and control. By combining visual network activity with simple controls, GlassWire helps you understand what’s happening behind the scenes and take action when something looks out of the ordinary. Today … More →
The post Product showcase: GlassWire mobile firewall for Android appeared first on Help Net Security.
CVE-2025-14020 | LINE Client up to 14.19 on Android Notifications clickjacking (EUVD-2025-203348)
CVE-2025-14722 | vion707 DMadmin up to 3403cafdb42537a648c30bf8cbc8148ec60437d1 Backend AddonsController.class.php add cross site scripting
CVE-2024-44598 | FNT Command 13.4.0 C Base unrestricted upload (EUVD-2024-55355)
CVE-2025-14729 | CTCMS Content Management System up to 2.1.2 Backend App Configuration /ctcms/libs/Ct_App.php save CT_App_Paytype code injection
CVE-2025-14730 | CTCMS Content Management System up to 2.1.2 Backend System Configuration Ct_Config.php Cj_Add/Cj_Edit code injection
CVE-2025-14731 | CTCMS Content Management System up to 2.1.2 Frontend/Template Management CT_Parser.php special elements used in a template engine
CVE-2025-58173 | FreshRSS up to 1.27.0 Language input validation (GHSA-6c8h-w3j5-j293)
CVE-2025-66388 | Apache Airflow up to 3.1.3 Template information disclosure (EUVD-2025-203358)
CVE-2025-14387 | LearnPress Plugin up to 4.3.1 on WordPress get_profile_social cross site scripting (EUVD-2025-203384)
Passwordless is finally happening, and users barely notice
Security teams know the strain that comes from tightening authentication controls while keeping users productive. A new report from Okta suggests this strain is easing. Stronger authentication methods are gaining traction, and many of them let users move through sign in flows with less effort than before. The report indicates that the long held belief that better security slows people down is becoming less relevant as these methods improve both protection and usability. MFA growth … More →
The post Passwordless is finally happening, and users barely notice appeared first on Help Net Security.