Aggregator

A vulnerability, which was classified as problematic, has been found in Artemis and HornetQ up to 2.3.x. This affects an unknown part of the component UDP Discovery. Performing a manipulation as part of Multicast Message results in resource consumption. This vulnerability is identified as CVE-2017-12174. The attack can be initiated remotely. There is not any exploit available. It is advisable to upgrade the affected component.

A vulnerability categorized as problematic has been discovered in Apache ActiveMQ Artemis up to 2.12.0. Affected by this issue is some unknown functionality of the file etc/artemis-users.properties of the component Management API. Executing a manipulation can lead to insufficiently protected credentials. This vulnerability is tracked as CVE-2020-10727. The attack is restricted to local execution. No exploit exists.

A vulnerability labeled as problematic has been found in Apache ActiveMQ Artemis up to 2.13.0. This affects an unknown function of the component MQTT Handler. The manipulation of the argument client-id/topic name as part of Packet results in cross site scripting. This vulnerability is identified as CVE-2020-13932. The attack can be executed remotely. There is not any exploit available.

A vulnerability, which was classified as critical, was found in Apache ActiveMQ and ActiveMQ Artemis. This vulnerability affects unknown code of the component LDAP Login Module. Such manipulation leads to improper authentication. This vulnerability is uniquely identified as CVE-2021-26117. The attack can only be initiated within the local network. No exploit exists. You should upgrade the affected component.

A vulnerability has been found in Apache ActiveMQ Artemis 2.15.0 and classified as critical. This issue affects some unknown processing of the component OpenWire Protocol Handler. Performing a manipulation results in improper access controls. This vulnerability was named CVE-2021-26118. The attack needs to be approached within the local network. There is no available exploit.

A vulnerability labeled as very critical has been found in Oracle FLEXCUBE Private Banking 12.0.0/12.1.0. This impacts an unknown function of the component Apache ActiveMQ. Executing a manipulation can lead to improper authentication. This vulnerability is handled as CVE-2021-26117. The attack can be executed remotely. There is not any exploit available. The affected component should be upgraded.

A vulnerability marked as problematic has been reported in Apache ActiveMQ Artemis up to 2.19.0. Impacted is an unknown function. The manipulation leads to resource consumption. This vulnerability is traded as CVE-2022-23913. It is possible to initiate the attack remotely. There is no exploit available. It is suggested to upgrade the affected component.

A vulnerability marked as problematic has been reported in Apache ActiveMQ Artemis up to 2.23.x. The affected element is an unknown function of the component Address/Queue. Performing a manipulation results in basic cross site scripting. This vulnerability is known as CVE-2022-35278. Remote exploitation of the attack is possible. No exploit is available. It is suggested to upgrade the affected component.

A vulnerability labeled as problematic has been found in Red Hat AMQ Broker. The impacted element is an unknown function of the component Messages Handler. The manipulation results in resource consumption. This vulnerability is identified as CVE-2021-4040. The attack can only be performed from the local network. There is not any exploit available. It is best practice to apply a patch to resolve this issue.

A vulnerability has been found in Oracle Enterprise Data Quality 12.2.1.4.0 and classified as critical. This affects an unknown part of the component General. The manipulation leads to improper authentication. This vulnerability is uniquely identified as CVE-2021-26117. The attack is possible to be carried out remotely. No exploit exists.

1Password has announced 1Password Credential Broker, a new product that securely brokers credentials, tokens, and federated access from 1Password to trusted requesters. The 1Password Credential Broker is available in private beta today, with support for GitHub Actions and a roadmap that extends trusted access across humans, machine workloads, and AI agents through a common identity fabric. For two decades, 1Password has helped consumers and businesses protect the credentials they use to access critical systems. But … More →

The post 1Password Credential Broker reduces secret sprawl through identity-based credential delivery appeared first on Help Net Security.

Novo Nordisk suffered a cyberattack where clinical trial data was copied. The breach is confirmed, but no threat actor has claimed responsibility. The Danish pharmaceutical giant Novo Nordisk disclosed a cybersecurity breach that resulted in unauthorized access to internal IT systems and the theft of personal data. The company sells some of the most in-demand […]

В phpBB нашли уязвимость, позволявшую обойти авторизацию и читать чужую переписку.

Hackers are using Microsoft’s own cloud tools to quietly hunt down payroll and HR staff inside corporate networks, then reroute employee salaries to accounts they control. Security teams are racing to respond as the campaign continues to spread across industries and borders. The attack method is deceptively clean. Instead of planting malware or exploiting software […]

The post Hackers Use Microsoft Graph Reconnaissance to Target Payroll and HR Employees appeared first on Cyber Security News.

2026年6月12日，美国国家情报总监办公室新闻稿第10-26号发布：《美国国家情报总监加巴德披露美国纳税人资助的全球生物实验室计划的证据》

根据智库 Centre for Global Development 的地理分析，数百万儿童就读的学校附近存在已知的铅、汞、砷和杀虫剂等有毒污染。研究发现，亚洲、非洲和拉丁美洲 17 个国家的逾 25.2 万所学校位于有毒污染场地 5 公里范围内。这些学校有 4300 多万名儿童，其中 520 万名儿童位于 1 公里范围内。发达国家受污染影响的负担不成比例的落在贫困学生和非白人学生身上，但在发展中国家污染集中在富裕人群居住的城市，城市学校的规模通常更大，因此学生也更多——以菲律宾为例，9% 的学校靠近污染场地，而这些学校的学生总数占到全国学生总数的 27%。分析还显示，私立学校比公立学校更有可能位于污染场地附近。加纳 41% 的私立学校靠近污染场地，而公立学校的这一比例仅为 18%。

Trust3 AI has announced AgentDOS, an enterprise control plane that provides visibility into AI agents, including real-time token consumption monitoring across platforms such as Databricks Agent Bricks and Microsoft Copilot Studio. As enterprises rapidly scale AI adoption, a new class of risk is emerging: autonomous agents acting beyond their intended scope, accessing regulated data, and silently driving up token consumption. Regulatory frameworks such as the EU AI Act and standards like the NIST AI Risk … More →

The post Trust3 AI’s AgentDOS monitors AI agent activity, data access, and token consumption appeared first on Help Net Security.

Cloudflare is deepening our investment in AI with the addition of team members from Ensemble AI, focusing on machine learning infrastructure and efficiency.