Aggregator

A CVSS score 6.5 AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N severity vulnerability discovered by 'Anonymous' was reported to the affected vendor on: 2025-04-04, 62 days ago. The vendor is given until 2025-08-02 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 7.8 AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H severity vulnerability discovered by 'Marcin Wiazowski' was reported to the affected vendor on: 2025-04-04, 66 days ago. The vendor is given until 2025-08-02 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 3.3 AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N severity vulnerability discovered by 'Michael DePlante (@izobashi) of Trend Zero Day Initiative' was reported to the affected vendor on: 2025-04-04, 66 days ago. The vendor is given until 2025-08-02 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 3.3 AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N severity vulnerability discovered by 'Michael DePlante (@izobashi) of Trend Zero Day Initiative' was reported to the affected vendor on: 2025-04-04, 66 days ago. The vendor is given until 2025-08-02 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 3.3 AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N severity vulnerability discovered by 'St4nly0n' was reported to the affected vendor on: 2025-04-04, 66 days ago. The vendor is given until 2025-08-02 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 3.3 AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N severity vulnerability discovered by 'Michael DePlante (@izobashi) of Trend Zero Day Initiative' was reported to the affected vendor on: 2025-04-04, 66 days ago. The vendor is given until 2025-08-02 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 6.5 AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N severity vulnerability discovered by 'Anonymous' was reported to the affected vendor on: 2025-04-04, 66 days ago. The vendor is given until 2025-08-02 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

Q1 Goals to Gaps in Security: The Rise of HR-Themed Phishing

The post Q1 Goals to Gaps in Security: The Rise of HR-Themed Phishing appeared first on Security Boulevard.

The Computer Emergency Response Team of Ukraine (CERT-UA) has revealed that no less than three cyber attacks were recorded against state administration bodies and critical infrastructure facilities in the country with an aim to steal sensitive data. The campaign, the agency said, involved the use of compromised email accounts to send phishing messages containing links pointing to legitimate

"毒种子"钓鱼活动入侵企业邮箱，窃取加密货币钱包助记词！

"毒种子"钓鱼活动入侵企业邮箱，窃取加密货币钱包助记词！

In this Help Net Security video, Nick Barter, Chief Strategy Officer at Nothreat, discusses how AI is no longer just a tool for defenders, it’s now a powerful weapon in the hands of attackers. With the adoption of generative AI, cyber threats are becoming more scalable, evasive, and automated than ever before. This shift is challenging traditional security models, which were never built to withstand this new level of sophistication. Barter dives into how AI … More →

The post Inside the AI-driven threat landscape appeared first on Help Net Security.

Простой документ становится оружием против защищённых дата-центров.

赛博黄泉下，是技术理性和人类终极情感的极致拉扯。

赛博黄泉下，是技术理性和人类终极情感的极致拉扯。

赛博黄泉下，是技术理性和人类终极情感的极致拉扯。

赛博黄泉下，是技术理性和人类终极情感的极致拉扯。

赛博黄泉下，是技术理性和人类终极情感的极致拉扯。

Here’s a look at the most interesting products from the past week, featuring releases from 1touch.io, Bitsight, Bluefin, CyberQP, and Exabeam. Exabeam Nova accelerates threat detection and response By correlating multiple detections within a case and using a proprietary threat classification framework, Exabeam Nova distinguishes between compromised insiders, malicious insiders, and undetermined threats with precision, enabling security teams to quickly identify, investigate and respond to threats with greater efficiency and accuracy. CyberQP launches Zero Trust … More →

The post New infosec products of the week: April 4, 2025 appeared first on Help Net Security.

A maximum severity security vulnerability has been disclosed in Apache Parquet's Java Library that, if successfully exploited, could allow a remote attacker to execute arbitrary code on susceptible instances. Apache Parquet is a free and open-source columnar data file format that's designed for efficient data processing and retrieval, providing support for complex data, high-performance