Aggregator

欢迎报名华东师范大学密码学院！报名起止时间：即日起至2025年9月12日（周五）9:00

Ваш новый ассистент, который сам меняет пароли, пока вы спите.

Cloud storage and remote operation can expose critical sectors to Chinese espionage, warned the Czech Republic's NÚKIB, "making trust in the reliability of the provider absolutely crucial."

CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.

• CVE-2025-38352 Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability
• CVE-2025-48543 Android Runtime Unspecified Vulnerability
• CVE-2025-53690 Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.

Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the KEV Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the BOD 22-01 Fact Sheet for more information.

Although BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediation of KEV Catalog vulnerabilities as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.

CISA released five Industrial Control Systems (ICS) advisories on September 4, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS.

• ICSA-25-247-01 Honeywell OneWireless Wireless Device Manager (WDM)
• ICSA-25-217-01 Mitsubishi Electric Iconics Digital Solutions Multiple Products (Update A)
• ICSA-25-105-07 Delta Electronics COMMGR (Update A)
• ICSA-25-205-03 Honeywell Experion PKS (Update A)
• ICSA-25-191-10 End-of-Train and Head-of-Train Remote Linking Protocol (Update B)

CISA encourages users and administrators to review newly released ICS advisories for technical details and mitigations.

Microsoft says the August 2025 security updates are triggering unexpected User Account Control (UAC) prompts and app installation issues for non-admin users across all supported Windows versions. [...]

What is the Personal Data Protection Act (PDPA)? The Singapore Personal Data Protection Act (PDPA), enacted in 2012 and enforced by the Personal Data Protection Commission (PDPC), is the nation’s comprehensive data protection law. It governs the collection, use, and disclosure of personal data by organizations while balancing individuals’ right to privacy with the need […]

The post Singapore Personal Data Protection Act (PDPA) appeared first on Centraleyes.

The post Singapore Personal Data Protection Act (PDPA) appeared first on Security Boulevard.

What is the Data Privacy Act (DPA)? The Philippines Data Privacy Act of 2012 (Republic Act No. 10173), commonly referred to as the DPA, is the country’s primary data protection law. Enacted in August 2012, the Act was designed to safeguard the fundamental right to privacy of every Filipino while ensuring the free flow of […]

The post Philippines Data Privacy Act of 2012 appeared first on Centraleyes.

The post Philippines Data Privacy Act of 2012 appeared first on Security Boulevard.

Note: The names of both employees have been removed for privacy reasons, following a request from Google. We are now referring to them as Worker 1 and Worker 2.

JLR said it is investigating following claims by the actor “Scattered Lapsus$ Hunters” that it had stolen data from the firm and had issued an extortion demand

A threat actor is leveraging a zero-day vulnerability (CVE-2025-53690) and an exposed sample ASP.NET machine key to breach internet-facing, on-premises deployments of several Sitecore solutions, Mandiant has revealed. About CVE-2025-53690 CVE-2025-53690 is a ViewState deserialization vulnerability that affects any version of Sitecore Experience Manager (XM), Experience Platform (XP), Experience Commerce (XC), and Managed Cloud. Deployed instances are affected by this vulnerability if they have been deployed by using a sample machine key that has been … More →

The post Sitecore zero-day vulnerability exploited by attackers (CVE-2025-53690) appeared first on Help Net Security.

Лаборатория будет помогать всем  — от юристов до спонсоров open source.

OpenAI is launching a Jobs Platform and new Certifications to connect workers with jobs, training, and certifications. Learn how we’re expanding economic opportunity and making AI skills more accessible.

Теперь у Jaguar Land Rover есть свежий контент в Telegram-канале хакеров.

关键词安全漏洞安全公司 ReversingLabs 发文，透露微软 VS Code 插件市场存在一项 " 鸠占

关键词安全漏洞科技媒体 Windows Report 昨日（9 月 1 日）发布博文，报道称微软承认 Wind

关键词网络攻击近年来，随着无人机在航拍、物流、农业等领域的广泛应用，相关的安全问题也日益凸显。