Aggregator

1160 украденных дисков и десятки миллионов ущерба. Пирату из Мемфиса вынесли судебный приговор.

A vulnerability marked as critical has been reported in Apache CXF up to 3.6.7/4.0.8/4.1.2. The impacted element is an unknown function of the component JMS Configuration Handler. This manipulation causes improper input validation. This vulnerability appears as CVE-2025-48913. The attack may be initiated remotely. There is no available exploit. It is suggested to upgrade the affected component.

A vulnerability labeled as problematic has been found in Bouncy Castle for Java. Affected is an unknown function of the component API Module. Such manipulation leads to allocation of resources. This vulnerability is listed as CVE-2025-8916. The attack may be performed from remote. There is no available exploit.

A vulnerability classified as problematic has been found in Bouncy Castle for Java up to 1.77/2.0.0. This issue affects some unknown processing of the component API Module. Performing manipulation results in allocation of resources. This vulnerability is identified as CVE-2025-8885. The attack can be initiated remotely. There is not any exploit available.

A vulnerability described as critical has been identified in Apache Portable Runtime up to 1.7.0 on Windows. This affects the function apr_socket_sendv. Such manipulation leads to stack-based buffer overflow. This vulnerability is traded as CVE-2022-28331. Access to the local network is required for this attack to succeed. There is no exploit available.

为加速提升我国相关领域人员驾驭开源情报的能力， 第15期全国开源情报能力提升培训班将于2025年10月20日在南宁开班。

2025年7月下旬，安哥拉政府减少燃料补贴的决定引发了大规模罢工和骚乱，最终演变成针对中国商店和工厂的暴力事件。这场表面上的经济抗议活动，迅速转变为针对中国目标的暴力事件，反映了非洲大陆上复杂的地缘政治博弈和信息争夺战。

A sophisticated malvertising campaign has emerged, exploiting GitHub repositories through dangling commits to distribute malware via fake GitHub Desktop clients. This novel attack vector represents a significant evolution in cybercriminal tactics, leveraging the trust and legitimacy associated with GitHub’s platform to deceive unsuspecting users into downloading malicious software. The campaign operates by promoting compromised GitHub […]

The post New Malvertising Campaign Leverages GitHub Repository to Deliver Malware appeared first on Cyber Security News.

A vulnerability classified as critical has been found in Mercury KM08-708H GiGA WiFi Wave2 1.1. Affected by this issue is the function sub_450B2C of the file /goform/mcr_setSysAdm. The manipulation of the argument ChgUserId leads to buffer overflow. This vulnerability is traded as CVE-2025-10385. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

Discover how to leverage open-source tools for vulnerability management while meeting compliance requirements. Learn best practices for secure and compliant software development.

The post Exploring Open Source and Compliance in Vulnerability Management appeared first on Security Boulevard.

Submit #643902 / VDB-323820

Cloudflare’s Dashboard and a set of related APIs were unavailable or partially available for an hour starting on Sep 12, 17:57 UTC. The outage did not affect the serving of cached files via the

A sophisticated backdoor malware known as Backdoor.WIN32.Buterat has emerged as a significant threat to enterprise networks, demonstrating advanced persistence techniques and stealth capabilities that enable attackers to maintain long-term unauthorized access to compromised systems. The malware has been identified targeting government and corporate environments through carefully orchestrated phishing campaigns, malicious email attachments, and trojanized software […]

The post Buterat Backdoor Attacking Enterprises to Establish Persistence and Control Endpoints appeared first on Cyber Security News.

Ученые утверждают, что обнаружили потенциальную биосигнатуру на Марсе.

Explore Customer Identity and Access Management (CIAM): its benefits, components, and how it differs from IAM. Learn to implement CIAM effectively for enhanced user experience and security.

The post What is Customer Identity and Access Management? appeared first on Security Boulevard.

Currently trending CVE - Hype Score: 2 - SMB Server might be susceptible to relay attacks depending on the configuration. An attacker who successfully exploited these vulnerabilities could perform relay attacks and make the users subject to elevation of privilege attacks. The SMB Server already supports mechanisms for ...

A vulnerability was found in Oracle Communications Diameter Signaling Router 9.0.0.0. It has been classified as critical. This affects an unknown part of the component Platform. Performing manipulation results in denial of service. This vulnerability is identified as CVE-2022-25147. The attack can be initiated remotely. There is not any exploit available.

A vulnerability categorized as critical has been discovered in Oracle Financial Services Behavior Detection Platform 8.0.8.1/8.1.1.1/8.1.2.5/8.1.2.6. Affected is an unknown function of the component Application. Executing manipulation can lead to integer overflow. This vulnerability is registered as CVE-2022-25147. It is possible to launch the attack remotely. No exploit is available.

A vulnerability labeled as critical has been found in Oracle Financial Services Trade-Based Anti Money Laundering Enterprise Edition 8.0.8. Affected by this issue is some unknown functionality of the component Platform. The manipulation results in integer overflow. This vulnerability is reported as CVE-2022-25147. The attack can be launched remotely. No exploit exists.

A vulnerability marked as critical has been reported in Apache Portable Runtime Utility up to 1.6.1. The impacted element is the function apr_base64. This manipulation causes integer overflow. This vulnerability appears as CVE-2022-25147. The attacker needs to be present on the local network. There is no available exploit.