Aggregator

A vulnerability has been found in Consensys Discovery up to 0.4.4 and classified as problematic. This vulnerability affects unknown code of the component AES Handler/GCM Handler. The manipulation leads to reusing a nonce. This vulnerability is traded as CVE-2024-23688. Access to the local network is required for this attack to succeed. There is no exploit available. The affected component should be upgraded.

A vulnerability was found in DependencyCheck up to 9.0.5/9.0.6 on Maven/CLI/Ant. It has been rated as problematic. The impacted element is an unknown function of the component Debug Mode. Performing a manipulation results in sensitive information in log files. This vulnerability was named CVE-2024-23686. The attack needs to be approached within the local network. There is no available exploit.

A vulnerability categorized as critical has been discovered in Folio mod-data-export-spring versions up to 1.5.3/2.0.1. This affects an unknown function of the component API. Executing a manipulation can lead to hard-coded credentials. The identification of this vulnerability is CVE-2024-23687. The attack may be launched remotely. There is no exploit available. It is advisable to upgrade the affected component.

A vulnerability described as critical has been identified in WuKongOpenSource WukongCRM 72crm_9.0.1_20191202. The impacted element is the function parseObject of the component fastjson. The manipulation results in deserialization. This vulnerability is known as CVE-2024-23052. It is possible to launch the attack remotely. No exploit is available.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.6.21/6.7.8. This issue affects the function wakeup_kswapd of the component vmscan. This manipulation causes memory corruption. This vulnerability is handled as CVE-2024-26783. The attack can only be done within the local network. There is not any exploit available. It is advisable to upgrade the affected component.

A vulnerability identified as critical has been detected in dset up to 3.1.3. Impacted is the function dset. The manipulation leads to improperly controlled modification of object prototype attributes. This vulnerability is traded as CVE-2024-21529. It is possible to initiate the attack remotely. There is no exploit available. You should upgrade the affected component.

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.

• CVE-2023-4346 KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability
• CVE-2026-46817 Oracle E-Business Suite Improper Privilege Management Vulnerability  

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.

Binding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies. BOD 26-04 reinforces the importance of the KEV Catalog and requires federal agencies to prioritize rapid remediation of high-risk vulnerabilities, specifically those identified by Common Vulnerabilities and Exposures (CVEs) listed in CISA’s KEV Catalog on publicly exposed assets that grant total control of the asset post-exploitation, while deferring action for lower-risk vulnerabilities. BOD 26-04 further establishes basic expectations for when agencies must check whether threat actors compromised the system before the patch was applied.

While BOD 26-04 applies only to FCEB agencies, CISA encourages all organizations to adopt risk-based vulnerability management and prioritize remediation of KEV Catalog vulnerabilities. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.

Aware of an exploited vulnerability not currently listed in the KEV Catalog? Submit it for potential addition through CISA’s KEV Nomination Form. Potential KEV additions must have a CVE ID, evidence of exploitation, and clear mitigation guidance. 

Progress has restored access to its ShareFile Storage Zones Controller after a four-day suspension triggered by a credible external security threat

Cyber Advisors are offering free 30-minute consultations to help small businesses get started with cyber security.

Microsoft’s July 2026 Patch Tuesday fixes 622 CVEs, including exploited AD FS and SharePoint flaws, plus the disclosed BitLocker bypass requiring urgent action.

AsyncAPI npm packages with 2M weekly downloads were compromised, spreading malware with info-stealing, crypto-theft and RAT capabilities. OX Security researchers disclosed on July 14 that the AsyncAPI npm organization was compromised, with malicious code injected into four packages that together account for over 2 million weekly downloads. The affected versions are @asyncapi/generator 3.3.1, @asyncapi/generator-components 0.7.1, […]

For years, routing traffic through cloud proxies was good enough. Then work moved to the browser, AI entered the workflow, and the inspection model stopped keeping up. Enterprise workflows now live across SaaS applications, browsers, and an expanding ecosystem of generative AI tools, unsanctioned browser extensions, and autonomous agents. Employees routinely paste intellectual property into

A vulnerability has been found in Linux Kernel up to 6.1.159/6.6.119/6.12.63/6.18.2 and classified as critical. Impacted is the function f2fs_write_cache_pages. This manipulation causes race condition. The identification of this vulnerability is CVE-2025-68772. The attack needs to be done within the local network. There is no exploit available. The affected component should be upgraded.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.12.63/6.18.2/6.19-rc1. This vulnerability affects the function bnxt_rx_xdp. The manipulation leads to excessive iteration. This vulnerability is uniquely identified as CVE-2025-68770. The attack can only be initiated within the local network. No exploit exists. It is advisable to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.1.159/6.6.119/6.12.63/6.18.2 and classified as critical. The affected element is the function ocfs2_find_victim_chain. Such manipulation of the argument cl_next_free_rec leads to allocation of resources. This vulnerability is referenced as CVE-2025-68771. The attack needs to be initiated within the local network. No exploit is available. It is suggested to upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 6.18.2/6.19-rc1 and classified as critical. This affects the function fqdir_pre_exit of the component inet. The manipulation leads to deadlock. This vulnerability is referenced as CVE-2025-68768. The attack needs to be initiated within the local network. No exploit is available. The affected component should be upgraded.

A vulnerability classified as critical was found in Linux Kernel up to 6.1.159/6.6.119/6.12.63/6.18.2. This affects the function f2fs_recover_fsync_data. Executing a manipulation can lead to unchecked return value. This vulnerability is handled as CVE-2025-68769. The attack can only be done within the local network. There is not any exploit available. Upgrading the affected component is advised.

A vulnerability was found in Linux Kernel up to 6.1.159/6.6.119/6.12.63/6.18.2 and classified as critical. This vulnerability affects unknown code of the component hfsplus. The manipulation results in improper initialization. This vulnerability is identified as CVE-2025-68767. The attack can only be performed from the local network. There is not any exploit available. It is suggested to upgrade the affected component.

A previously undocumented Rust-based remote access trojan, dubbed LabubaRAT, which masquerades as legitimate NVIDIA software to establish persistent access on Windows systems. The malware was identified by the company’s Adversary Pursuit Group (APG) and appears designed as a reusable, panel-managed framework rather than a single-purpose payload. The observed sample, named nvidia-sysruntime.exe, impersonates an NVIDIA Container […]

The post LabubaRAT Rust Malware Masquerades as NVIDIA Software to Backdoor Windows Systems appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.