Aggregator

CISA Is Shrinking: What Does It Mean for Cyber?

darkreading
2 months 3 weeks ago
Dark Reading Confidential Episode 7: Cyber experts Tom Parker and Jake Williams offer their views on the practical impact of cuts to the US Cybersecurity and Infrastructure Security Agency.
Dark Reading Staff

Hackers deploy fake SonicWall VPN App to steal corporate credentials

Security Affairs
2 months 3 weeks ago
Hackers spread a trojanized version of SonicWall VPN app to steal login credentials from users accessing corporate networks. Unknown threat actors are distributing a trojanized version of SonicWall NetExtender SSL VPN app to steal user credentials. The legitimate NetExtender app lets remote users securely access and use company network resources as if they were on-site. […]
Pierluigi Paganini

CookieShop商城代码审计小结

先知技术社区
2 months 3 weeks ago
蛋糕商城JPA版本是一个开源的CMS系统，它主要基于Spring Boot 3.4.0进行开发，采用MariaDB数据库，涉及Jakarta Servlet、JSP、JSTL，同时使用了Java通用代码生成器来生成后台界面，使用方可以按需定制页面并对项目进行二开，总体是一个对使用者很友好的产品

CVE-2019-6693 | Fortinet FortiOS up to 5.6.10/6.0.6/6.2.0 Configuration Backup hard-coded credentials (FG-IR-19-007 / Nessus ID 209820)

Vuldb Updates
2 months 3 weeks ago
A vulnerability was found in Fortinet FortiOS up to 5.6.10/6.0.6/6.2.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Configuration Backup. The manipulation leads to hard-coded credentials. This vulnerability is known as CVE-2019-6693. The attack can be launched remotely. Furthermore, there is an exploit available.
vuldb.com

The Era of Agentic Security with Microsoft Security Copilot

Security Boulevard
2 months 3 weeks ago

In the evolving landscape of cyber threats, security teams often find themselves overwhelmed. They are constantly battling an unrelenting barrage of incidents with limited resources. Traditional automation falls short. The dynamic and unpredictable nature of modern attacks keeps threat actors one step ahead of defenders. This is where Microsoft Security Copilot steps in. It’s not..

The post The Era of Agentic Security with Microsoft Security Copilot appeared first on Security Boulevard.

Tom Hollingsworth

CVE-2025-48467 | Advantech Wireless Sensing and Equipment A2.01 B00 denial of service (EUVD-2025-18990)

Vuldb Updates
2 months 3 weeks ago
A vulnerability, which was classified as problematic, was found in Advantech Wireless Sensing and Equipment A2.01 B00. This affects an unknown part. The manipulation leads to denial of service. This vulnerability is uniquely identified as CVE-2025-48467. Access to the local network is required for this attack to succeed. There is no exploit available.
vuldb.com

CVE-2025-6428 | Mozilla Firefox up to 139 on Android URL querystring redirect

Vuldb Updates
2 months 3 weeks ago
A vulnerability was found in Mozilla Firefox up to 139 on Android and classified as problematic. This issue affects some unknown processing of the component URL Handler. The manipulation of the argument querystring leads to open redirect. The identification of this vulnerability is CVE-2025-6428. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-6429 | Mozilla Firefox up to 139 Embed Tag escape output (Nessus ID 240336)

Vuldb Updates
2 months 3 weeks ago
A vulnerability classified as problematic has been found in Mozilla Firefox up to 139. Affected is an unknown function of the component Embed Tag Handler. The manipulation leads to escaping of output. This vulnerability is traded as CVE-2025-6429. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

Managed ad