New whitepaper outlines the taxonomy of failure modes in AI agents

We are releasing a taxonomy of failure modes in AI agents to help security professionals and machine learning engineers think through how AI systems can fail and design them with safety and security in mind. The taxonomy continues Microsoft AI Red Team's work to lead the creation of systematizati...

Shopify faces privacy lawsuit for collecting customer data

Shopify faces a data privacy class action lawsuit in the US that could change the way globally active companies can be held accountable. The proposed class action is a revival of a case that had been dismissed by a lower court judge and a three-judge 9th Circuit Court of Appeals panel. But now it...

Breaking the Flow and the Bank: Stealthy Cyberattacks on Water Network Hydraulics

As water distribution networks WDNs become increasingly connected with digital infrastructures, they face greater exposure to cyberattacks that threaten their operational integrity. Stealthy False Data Injection Attacks SFDIAs are particularly concerning, as they manipulate sensor data to...

Breaking the Prompt Wall (I): a Real-World Case Study of Attacking ChatGPT Via Lightweight Prompt Injection

Whitepaper called Breaking The Prompt Wall I: A Real-World Case Study Of Attacking ChatGPT Via Lightweight Prompt Injection...

CVE-2025-39430

creationtimestamp| type| source ---|---|--- 2025-04-17 15:57:30+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12252...

CVE-2025-36545

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused...

CVE-2025-32090

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused...

CVE-2025-31145

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused...

CVE-2020-18243

SQL injection vulnerability found in Enricozab CMS v.1.0 allows a remote attacker to execute arbitrary code via /hdo/hdo-view-case.php...

CVE-2025-33022

The reporter agreed to not assign CVE ID...

Enricozab CMS 安全漏洞

Enricozab CMS is a content management system by Enrico Zabayle Personal Developer. A security vulnerability exists in Enricozab CMS version v.1.0, which stems from /hdo/hdo-view-case.php not properly filtering inputs, which could lead to remote execution of arbitrary code...

CVE-2025-32693

creationtimestamp| type| source ---|---|--- 2025-04-09 20:57:17+00:00| seen| https://t.me/cvedetector/22574...

CVE-2025-26888

creationtimestamp| type| source ---|---|--- 2025-04-09 19:48:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11141...

CVE-2025-30293

creationtimestamp| type| source ---|---|--- 2025-04-09 00:02:50+00:00| seen| https://t.me/cvedetector/22519 2025-04-18 18:58:52+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12529...

PT-2025-39241

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue within the Bluetooth L2CAP implementation related to the handling of encryption key sizes during incoming connections. The problem arises when the...

tomcat: RCE due to TOCTOU issue in JSP compilation

A flaw was found in Tomcat. A Time-of-check Time-of-use TOCTOU race condition occurs during JSP compilation on case-insensitive file systems when the default servlet is enabled for writing. This vulnerability allows an uploaded file to be treated as a JSP and executed, resulting in remote code...

tomcat: RCE due to TOCTOU issue in JSP compilation

A flaw was found in Tomcat. A Time-of-check Time-of-use TOCTOU race condition occurs during JSP compilation on case-insensitive file systems when the default servlet is enabled for writing. This vulnerability allows an uploaded file to be treated as a JSP and executed, resulting in remote code...

APSB25-27 : Security update available for Adobe Experience Manager Forms

Adobe has released security updates for AEM Forms on JEE versions for a dependency on vulnerable Third-Party Component . This dependency update resolves an important vulnerability that could lead to path traversal and case sensitive match exception...

tomcat: RCE due to TOCTOU issue in JSP compilation

A flaw was found in Tomcat. A Time-of-check Time-of-use TOCTOU race condition occurs during JSP compilation on case-insensitive file systems when the default servlet is enabled for writing. This vulnerability allows an uploaded file to be treated as a JSP and executed, resulting in remote code...

tomcat: RCE due to TOCTOU issue in JSP compilation

A flaw was found in Tomcat. A Time-of-check Time-of-use TOCTOU race condition occurs during JSP compilation on case-insensitive file systems when the default servlet is enabled for writing. This vulnerability allows an uploaded file to be treated as a JSP and executed, resulting in remote code...