CGA-PWMW-6Q47-QC67

Bulletin has no description...

Assessing the Role of AI in Zero Trust

By 2025, Zero Trust has evolved from a conceptual framework into an essential pillar of modern security. No longer merely theoretical, it’s now a requirement that organizations must adopt. A robust, defensible architecture built on Zero Trust principles does more than satisfy baseline regulatory...

Cyber Security of Mega Events: a Case Study of Securing the Digital Infrastructure for MahaKumbh 2025 -- a 45 Days Mega Event of 600 Million Footfalls

Mega events such as the Olympics, World Cup tournaments, G-20 Summit, religious events such as MahaKumbh are increasingly digitalized. From event ticketing, vendor booth or lodging reservations, sanitation, event scheduling, customer service, crime reporting, media streaming and messaging on...

MINI-4297-56C8-4579

Bulletin has no description...

Large Language Models in Cybersecurity: Applications, Vulnerabilities, and Defense Techniques

Large Language Models LLMs are transforming cybersecurity by enabling intelligent, adaptive, and automated approaches to threat detection, vulnerability assessment, and incident response. With their advanced language understanding and contextual reasoning, LLMs surpass traditional methods in...

GHSA-599F-7C49-W659

creationtimestamp| type| source ---|---|--- 2025-07-16 03:34:45+00:00| seen| https://gist.github.com/safer-bot/783dfe65a224789bd02fb4b05b200427 2025-07-16 06:08:19+00:00| seen| https://gist.github.com/safer-bot/68f4b89b600c072a0eedff4a29cfe91a 2025-07-16 07:27:47+00:00| seen|...

GHSA-PR98-23F8-JWXV

creationtimestamp| type| source ---|---|--- 2025-07-16 03:20:51+00:00| seen| https://gist.github.com/safer-bot/4a0c1681f4dce611ef9b2d8ad2491ce6 2025-07-16 03:41:01+00:00| seen| https://gist.github.com/safer-bot/1311a1d6fbeee3ebfc44b603cc3c1e8e 2025-07-16 03:46:52+00:00| seen|...

CVE-2025-53028

CVE-2025-53028 concerns Oracle VM VirtualBox 7.1.10 (Core) with a vulnerability that enables a highly privileged, local attacker who has logon to the host to take over the VirtualBox instance. The CVSS 3.1 base score is 8.2 (Confidentiality, Integrity, Availability – HIGH; vector: CVSS:3.1/AV:L/A...

CVE-2025-50089

CVE-2025-50089 affects Oracle MySQL Server (Server: Optimizer) with vulnerable 9.0.0–9.1.0. A high-privilege attacker with network access via multiple protocols can cause a hang or complete DoS of MySQL Server. The description notes a CVSS 3.1 base score of 4.9 (Availability impact); no explicit ...

CVE-2025-50078

CVE-2025-50078 affects Oracle MySQL Server (component: Server: DML). Affected versions: 8.0.0–8.0.42, 8.4.0–8.4.5, 9.0.0–9.3.0. An attacker with network access and low privileges can exploit via multiple protocols to cause a hang or crash (DoS). Base score 6.5 (Availability), vector CVSS:3.1/AV:N...

CVE-2025-50065

...

CVE-2025-30758

...

Oracle Linux 8 : pcs (ELSA-2025-11047)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-11047 advisory. 0.10.18-2.0.1.6 - Replace HAM-logo.png with a generic one 0.10.18-2.el810.6 - Fixed CVE-2024-49761 by updating rubygem rexml Resolves: RHEL-98708 Tenable has...

Indico vulnerability allows attackers to bulk dump user details

Impact An endpoint used to display details of users listed in certain fields such as ACLs could be misused to dump basic user details such as name, affiliation and email in bulk. !TIP If your instance allows everyone to create a user account, and you wish to truly restrict access to these user...

BELL-CVE-2025-38265

Bulletin has no description...

CVE-2025-38282

In the Linux kernel, the following vulnerability has been resolved: kernfs: Relax constraint in draining guard The active reference lifecycle provides the break/unbreak mechanism but the active reference is not truly active after unbreak -- callers don't use it afterwards but it's important for...

Azure Linux 3.0 Security Update: sudo (CVE-2025-32462)

The version of sudo installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-32462 advisory. - Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor...

Slackware: Security Advisory (SSA:2025-191-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-38331

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Use TOE/TSO on all TCP It is desireable to push the hardware accelerator to also process non-segmented TCP frames: we pass the skb-len to the "TOE/TSO" offloader and it will handle them. Without this quirk...

CVE-2025-38264

In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: sanitize request list handling Validate the request in nvmetcphandler2t to ensure it's not part of any list, otherwise a malicious R2T PDU might inject a loop in request list processing. Mitigation Check if Kernel confi...