Aggregator

CVE-2025-65494 | obgm libcoap 4.3.5 X.509 Certificate src/coap_openssl.c get_san_or_cn_from_cert null pointer dereference (Nessus ID 276684)

Vuldb Updates
2 weeks 6 days ago
A vulnerability categorized as problematic has been discovered in obgm libcoap 4.3.5. Affected is the function get_san_or_cn_from_cert of the file src/coap_openssl.c of the component X.509 Certificate Handler. Executing manipulation can lead to null pointer dereference. This vulnerability is handled as CVE-2025-65494. The attack can be executed remotely. There is not any exploit available.
vuldb.com

CVE-2025-65501 | obgm libcoap 4.3.5 DTLS Handshake coap_dtls_info_callback null pointer dereference (Nessus ID 276683)

Vuldb Updates
2 weeks 6 days ago
A vulnerability, which was classified as problematic, has been found in obgm libcoap 4.3.5. The affected element is the function coap_dtls_info_callback of the component DTLS Handshake Handler. The manipulation leads to null pointer dereference. This vulnerability is listed as CVE-2025-65501. The attack may be initiated remotely. There is no available exploit.
vuldb.com

CVE-2025-54956 | r-lib gh up to 1.4.x Header Authorization resource transfer (Issue 222 / EUVD-2025-23481)

Vuldb Updates
2 weeks 6 days ago
A vulnerability categorized as problematic has been discovered in r-lib gh up to 1.4.x. This affects an unknown function of the component Header Handler. Executing manipulation of the argument Authorization can lead to incorrect resource transfer. The identification of this vulnerability is CVE-2025-54956. The attack can only be executed locally. There is no exploit available. It is advisable to upgrade the affected component.
vuldb.com

INC

Dark Feed IO
2 weeks 6 days ago

You must login to view this content

cohenido

CISA Releases Seven Industrial Control Systems Advisories

CISA News
2 weeks 6 days ago

CISA released seven Industrial Control Systems (ICS) Advisories. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. 


CISA encourages users and administrators to review newly released ICS Advisories for technical details and mitigations.

CISA

Fake “Windows Update” screens fuels new wave of ClickFix attacks

Help Net Security
2 weeks 6 days ago

A convincing (but fake) “Windows Update” screen can be the perfect lure for tricking users into infecting their computers with malware. Add a multi-stage delivery chain with some offbeat techniques, and infostealer operators have everything they need to slip past defenses. The malware delivery campaigns “Since the beginning of October, Huntress has identified multiple ClickFix lure sites that trick victims into running a malicious command, following a consistent format and leading to a unique execution … More →

The post Fake “Windows Update” screens fuels new wave of ClickFix attacks appeared first on Help Net Security.

Zeljka Zorz

Threat Actors Exploiting Black Friday Shopping Hype – 2+ Million Attacks Recorded

Cyber Security News
2 weeks 6 days ago

The 2025 Black Friday shopping season has become a prime hunting ground for cybercriminals, with threat actors recording over 2 million phishing attacks targeting online gamers and shoppers worldwide. As global e-commerce continues to grow at 7-9% annually, attackers have adapted their tactics to exploit the seasonal rush, reduced user vigilance, and high-demand retail periods. […]

The post Threat Actors Exploiting Black Friday Shopping Hype – 2+ Million Attacks Recorded appeared first on Cyber Security News.

Tushar Subhra Dutta

ToddyCat’s New Hacking Tools Steal Outlook Emails and Microsoft 365 Access Tokens

The Hackers News
2 weeks 6 days ago
The threat actor known as ToddyCat has been observed adopting new methods to obtain access to corporate email data belonging to target companies, including using a custom tool dubbed TCSectorCopy. "This attack allows them to obtain tokens for the OAuth 2.0 authorization protocol using the user's browser, which can be used outside the perimeter of the compromised infrastructure to access
The Hacker News

3 SOC Challenges You Need to Solve Before 2026

The Hackers News
2 weeks 6 days ago
2026 will mark a pivotal shift in cybersecurity. Threat actors are moving from experimenting with AI to making it their primary weapon, using it to scale attacks, automate reconnaissance, and craft hyper-realistic social engineering campaigns. The Storm on the Horizon Global world instability, coupled with rapid technological advancement, will force security teams to adapt not just their
The Hacker News

Hackers Hijack Blender 3D Assets to Deploy StealC V2 Data-Stealing Malware

The Hackers News
2 weeks 6 days ago
Cybersecurity researchers have disclosed details of a new campaign that has leveraged Blender Foundation files to deliver an information stealer known as StealC V2. "This ongoing operation, active for at least six months, involves implanting malicious .blend files on platforms like CGTrader," Morphisec researcher Shmuel Uzan said in a report shared with The Hacker News. "Users unknowingly
The Hacker News

CVE-2007-2780 | PsychoStats up to 3.0.6b Error Message server.php newtheme information disclosure (EDB-30051 / XFDB-34366)

Vuldb Updates
2 weeks 6 days ago
A vulnerability has been found in PsychoStats up to 3.0.6b and classified as problematic. This affects an unknown part of the file server.php of the component Error Message Handler. This manipulation of the argument newtheme causes information disclosure. This vulnerability is tracked as CVE-2007-2780. The attack is possible to be carried out remotely. Moreover, an exploit is present.
vuldb.com

Managed ad