Aggregator

A vulnerability was found in Mozilla Thunderbird up to 91.13.0. It has been classified as problematic. This affects an unknown part of the component HTML Email Handler. The manipulation leads to information disclosure. This vulnerability is uniquely identified as CVE-2022-3032. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A critical vulnerability in Google Chrome has recently been discovered that allows malicious actors to break out of the browser’s protective sandbox environment, potentially giving attackers access to the underlying operating system. The flaw, identified as CVE-2025-2783, affects Chrome versions prior to 134.0.6998.142 across Windows, macOS, and Linux platforms. This vulnerability represents a significant security […]

The post Google Chrome Vulnerability Let Attackers Escape Payload from Sandbox – Technical Details Disclosed appeared first on Cyber Security News.

In response to the concerning rise of “violence-as-a-service” (VaaS) and the exploitation of youth by organized crime, Europol has announced the formation of a new Operational Task Force (OTF), codenamed GRIMM.  This multinational initiative, led by Sweden, brings together law enforcement agencies from Belgium, Denmark, Finland, France, Germany, the Netherlands, and Norway. Europol provides operational […]

The post Europol Creates Operational Taskforce to Tackle Violence-as-a-Service appeared first on Cyber Security News.

Bitwarden launched Access Intelligence, a set of new capabilities that enables enterprises to proactively defend against internal credential risks and external phishing threats. Access Intelligence introduces two core functionalities: Risk Insights, which allows IT teams to identify, prioritize, and remediate at-risk credentials; and Advanced Phishing Blocker, which alerts and redirects users away from known phishing sites in real-time, using a continuously updated open source blocklist of malicious domains. This approach enables better protection for users … More →

The post Bitwarden Access Intelligence defends against credential risks and phishing appeared first on Help Net Security.

A vulnerability has been found in GAMSoft Telsrv 1.4/1.5 and classified as problematic. This vulnerability affects unknown code. The manipulation of the argument Username leads to denial of service. This vulnerability was named CVE-2000-0665. The attack can be initiated remotely. Furthermore, there is an exploit available.

Google’s Threat Intelligence Group (GTIG) has revealed that 75 zero-day vulnerabilities were exploited in the wild during 2024, highlighting both evolving attacker tactics and shifting targets in the global cybersecurity landscape.  While this figure decreases from the 98 zero-days observed in 2023, it still represents a significant increase from the 63 tracked in 2022, underscoring […]

The post Google Warns of 75 Zero-Day Vulnerabilities Exploited in the Wild appeared first on Cyber Security News.

ExtraHop launched all-in-one sensor designed to unify network traffic collection that scales across a number of security use cases. This further advances ExtraHop’s vision to consolidate NDR, network performance monitoring (NPM), intrusion detection (IDS), and full packet forensics into an integrated, powerful, and adaptable security solution for the modern hybrid enterprise. According to IDC, tool consolidation can save 16% of total tool costs and nearly 20% of analyst time on average. With the ExtraHop all-in-one … More →

The post ExtraHop strenghtens network detection and response appeared first on Help Net Security.

A vulnerability classified as critical was found in Tecnick TCExam up to 11.2.21. Affected by this vulnerability is an unknown functionality of the file tce_edit_answer.php. The manipulation of the argument subject_module_id leads to sql injection. This vulnerability is known as CVE-2012-4237. The attack can be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

Currently trending CVE - Hype Score: 6 - Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. Starting from version 3.0.0-RC1 to before 3.9.15, 4.0.0-RC1 to before 4.14.15, and 5.0.0-RC1 to before 5.6.17, Craft is vulnerable to remote code execution. This is a ...

A vulnerability classified as problematic has been found in Soplanning up to 1.32. Affected is the function file_get_contents. The manipulation of the argument path with the input .. as part of Parameter leads to path traversal. This vulnerability is traded as CVE-2014-8676. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

OpenBSD 7.7, the 58th release of the security-focused operating system, was officially launched on April 28, 2025. This release substantially improves multiple areas, including performance optimization, hardware support, and security enhancements. The new version features notable performance improvements, particularly on ARM64 architecture, where the PMAP teardown has been optimized by skipping TLB flushes, resulting in […]

The post OpenBSD 7.7 Released with Significant Performance & Security Enhancements appeared first on Cyber Security News.

Cybersecurity company SentinelOne has revealed that a China-nexus threat cluster dubbed PurpleHaze conducted reconnaissance attempts against its infrastructure and some of its high-value customers. "We first became aware of this threat cluster during a 2024 intrusion conducted against an organization previously providing hardware logistics services for SentinelOne employees," security

Protect against LLM attacks such as prompt injection, exfiltration and extraction, and toxic AI outputs with Akamai Firewall for AI.

计算机安全研究，也要考虑历史的进程啊

计算机安全研究，也要考虑历史的进程啊

Microsoft has confirmed that its hotpatching feature for Windows Server 2025, which has been in preview since 2024, will transition to a paid subscription model starting July 1st, 2025.  The announcement, made by Janine Patrick, Windows Server Product Marketing Manager, and Artem Pronichkin, Senior Program Manager, marks a significant shift in how organizations can manage […]

The post Windows Server 2025 Hotpatching Service to be Rolled Out From July 1st, 2025 appeared first on Cyber Security News.

The Cybersecurity and Infrastructure Security Agency (CISA) has added three new flaws to its Known Exploited Vulnerabilities catalog on Monday, affecting Commvault (CVE-2025-3928), Active! Mail (CVE-2025-42599), and Broadcom Brocade (CVE-2025-1976) solutions. CISA’s KEV catalog is constantly updated and provides IT admins in US federal civilian agencies with instructions on how to remediate these threats and by which date (as mandated by the Binding Operational Directive 22-01), but this living document can also come in handy … More →

The post CISA warns about actively exploited Broadcom, Commvault vulnerabilities appeared first on Help Net Security.

NVIDIA's DOCA Argus prevents attacks before they compromise AI architectures.

Google tracked 75 zero-day flaws exploited in 2024, down from 98 in 2023, according to its Threat Intelligence Group’s latest analysis. In 2024, Google tracked 75 exploited zero-day vulnerabilities, down from 98 in 2023 but up from 63 in 2022. The researchers from Google Threat Intelligence Group (GTIG) observed that most targeted are end-user platforms, […]

A vulnerability classified as problematic was found in Linux Kernel up to 6.6.58/6.11.5. Affected by this vulnerability is the function vmxnet3_xdp_xmit_frame of the component vmxnet3. The manipulation leads to privilege escalation. This vulnerability is known as CVE-2024-58099. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.