B&R APROL

SUMMARY Updates are available that resolve privately reported vulnerabilities in the product versions listed as affected in this advisory. An attacker who successfully exploits these vulnerabilities could elevate privileges or gather sensitive information. 2. MITIGATING FACTORS Mitigating...

Kaspersky Links Head Mare to Twelve, Targeting Russian Entities via Shared C2 Servers

Two known threat activity clusters codenamed Head Mare and Twelve have likely joined forces to target Russian entities, new findings from Kaspersky reveal. "Head Mare relied heavily on tools previously associated with Twelve. Additionally, Head Mare attacks utilized command-and-control C2 servers...

CVE-2025-30348

encodeText in QDom in Qt before 6.8.0 has a complex algorithm involving XML string copy and inline replacement of parts of a string with relocation of later data...

CVE-2025-2538

creationtimestamp| type| source ---|---|--- 2025-03-20 21:20:00+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114196847021806320 2025-03-20 21:40:23+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lktny4lwwd2s 2025-03-20 21:59:06+00:00| seen|...

Tomorrow, and tomorrow, and tomorrow: Information security and the Baseball Hall of Fame

Welcome to this week's edition of the Threat Source newsletter. "Tomorrow, and tomorrow, and tomorrow / Creeps in this petty pace from day to day / To the last syllable of recorded time." - Shakespeare's Macbeth "But I am very poorly today and very stupid and I hate everybody and everything. One...

Rooted Androids 3,000x More Likely to Be Breached, Even iPhones Not Safe

A new Zimperium report reveals that rooted Android phones and jailbroken iOS devices face growing threats, with advanced toolkits making detection nearly impossible for cybersecurity researchers...

CVE-2025-0628

creationtimestamp| type| source ---|---|--- 2025-03-20 12:48:47+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114194836524629766 2025-03-20 13:03:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lksr45ozcp24 2025-03-20 13:13:01+00:00| seen|...

CVE-2024-9095

creationtimestamp| type| source ---|---|--- 2025-03-20 11:40:52+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lksmi2bray2p 2025-03-20 12:48:36+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114194836039010317 2025-03-20 19:18:37+00:00|...

CVE-2024-11958

creationtimestamp| type| source ---|---|--- 2025-03-20 11:40:26+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lksmhc6orn2g...

How to Protect Your Business from Cyber Threats: Mastering the Shared Responsibility Model

Cybersecurity isn't just another checkbox on your business agenda. It's a fundamental pillar of survival. As organizations increasingly migrate their operations to the cloud, understanding how to protect your digital assets becomes crucial. The shared responsibility model, exemplified through...

Santesoft Sante DICOM Viewer Pro

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to cause memory corruption that would result in execution of arbitrary code. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability,...

SMA Sunny Portal

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to upload and remotely execute code. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize network exposure for all...

SecPod launches Saner Cloud: A Revolutionary CNAPP For Preventive Cybersecurity

Bengaluru, India, 19th March 2025, CyberNewsWire...

Leaked Black Basta Chats Suggest Russian Officials Aided Leader's Escape from Armenia

The recently leaked trove of internal chat logs among members of the Black Basta ransomware operation has revealed possible connections between the e-crime gang and Russian authorities. The leak, containing over 200,000 messages from September 2023 to September 2024, was published by a Telegram...

weebly.com Open Redirect vulnerability OBB-4037955

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Fresh Faces Join the Take Command 2025 Lineup

Take Command 2025 is bringing together some of the sharpest minds in cybersecurity to tackle today’s most urgent challenges. From attacker methodologies and AI-driven security to MDR, red teaming, and exposure management, this year’s virtual event will provide security professionals with practica...

SpyCloud’s 2025 Identity Exposure Report Reveals the Scale and Hidden Risks of Digital Identity Threats

Austin, TX, United States, 19th March 2025, CyberNewsWire...

CVE-2024-13790

creationtimestamp| type| source ---|---|--- 2025-03-19 08:49:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8036 2025-03-19 09:40:19+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lkpvbnadmm24 2025-03-19 10:43:20+00:00| seen|...

Cybersecurity communities. Small hacker groups, big impact

TL;DR Cybersecurity communities and groups are an excellent opportunity to network and learn There are OWASP, DEF CON, 2600, university hacking societies, Meetup communities and more to choose from They provide workshops, talks, and practical learning opportunities benefiting both newcomers and...

app.axisrooms.com Cross Site Scripting vulnerability OBB-4037819

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...