Obelix: Mitigating Side-Channels through Dynamic Obfuscation

Trusted execution environments TEEs offer hardware-assisted means to protect code and data. However, as shown in numerous results over the years, attackers can use side-channels to leak data access patterns and even single-step the code. While the vendors are slowly introducing hardware-based...

The hardware device for controlling electrical circuits, ABB Switch Actuator 4 DU-83330, has vulnerabilities related to insufficient protection of operational data during debugging. This allows attackers to bypass authentication.

The vulnerability of the hardware device for controlling electrical circuits, the ABB Switch Actuator 4 DU-83330, is related to insufficient protection of operational data during the debugging process. Exploiting this vulnerability can allow an attacker to bypass authentication...

The vulnerability of Dell Enterprise SONiC operating systems, related to insufficient protection of registration data, allows attackers to disclose protected information.

The vulnerability of Dell Enterprise SONiC operating systems is related to insufficient protection of registration data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose the protected information...

Vulnerability of the Graphics component: Canvas2D in Mozilla Firefox, Firefox ESR, and the email client Thunderbird, which allows attackers to escalate their privileges.

The vulnerability of the Canvas2D component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to a data protection mechanism flaw. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...

The vulnerability of Mozilla Firefox’s Privacy component and Thunderbird’s email client allows attackers to bypass security restrictions.

The vulnerability of Mozilla Firefox’s Privacy component is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow a remote attacker to bypass security restrictions...

Threat Modeling for Enhancing Security of IoT Audio Classification Devices under a Secure Protocols Framework

The rapid proliferation of IoT nodes equipped with microphones and capable of performing on-device audio classification exposes highly sensitive data while operating under tight resource constraints. To protect against this, we present a defence-in-depth architecture comprising a security protoco...

The vulnerability of the Bluetooth component in iOS, iPadOS, tvOS, watchOS, visionOS, and macOS systems allows a perpetrator to gain unauthorized access to confidential information.

The vulnerability of Bluetooth components in iOS, iPadOS, tvOS, watchOS, visionOS, and macOS stems from insufficient protection of registration data. Exploiting this vulnerability can allow attackers to gain unauthorized access to confidential information...

CVE-2025-43331

A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Tahoe 26. An app may be able to access protected user data...

CVE-2025-43203

The issue was addressed with improved handling of caches. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26. An attacker with physical access to an unlocked device may be able to view an image in the most recently viewed locked note...

Why Secure Document Editing is More Important than Ever

Secure document editing protects sensitive data with encryption and compliance tools, while reducing costly breaches and building trust,…...

Microsoft Purview innovations for your Fabric data: Unify data security and governance for the AI era

The Microsoft Fabric and Purview teams are thrilled to participate in the European Microsoft Fabric Community Conference September 15-18, 2025, in Vienna, Austria. This event is Microsoft’s largest tech conference in Europe, where data professionals gather to connect and share insights on data,...

The vulnerability of the Extensions component of Google Chrome and Microsoft Edge browsers allows attackers to bypass security restrictions.

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to a flaw in data protection mechanisms. Exploiting this vulnerability allows an attacker to bypass security restrictions remotely...

The vulnerability of the Xbox Gaming Services library management software lies in the insufficient protection of sensitive data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Xbox Gaming Services library management software is related to insufficient protection of service data during certificate processing. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

CVE-2025-31255

An authorization issue exists in multiple Apple operating systems, where an app may be able to access sensitive user data . This vulnerability was addressed through improved state management . The issue is fixed in iOS 26 , iPadOS 26 , macOS Sequoia 15.7 , macOS Sonoma 14.8 , macOS Tahoe 26 , tvO...

CVE-2025-43279

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Tahoe 26. An app may be able to access user-sensitive data...

PT-2025-37824

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Sequoia 15.7 macOS versions prior to Sonoma 14.8 macOS versions prior to Tahoe 26 Description: An application may be able to access protected user data due to vulnerable code. The vulnerable code has been removed in th...

The vulnerability of the NVIDIA NVDebug debugging and diagnostic software tool, related to vulnerabilities in the authentication data protection mechanism, allows attackers to exploit their privileges.

The vulnerability of the NVIDIA NVDebug debugging and diagnostic software lies in the shortcomings of its authentication data protection mechanisms. Exploiting this vulnerability can allow attackers to gain increased privileges...

The vulnerability of the MapUrlToZone component in the Windows operating system, which allows a hacker to circumvent existing security restrictions

The vulnerability of the MapUrlToZone component in the Windows operating system is related to a violation of data protection mechanisms. Exploiting this vulnerability allows an attacker to circumvent existing security restrictions remotely...

The vulnerability of the Kernel-Mode Driver driver in Windows operating systems allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Kernel-Mode Driver driver in Windows operating systems is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Advisory ROSA-SA-2025-2997

software: curl 8.7.1 OS: ROSA-CHROME unaffected versions = curl-8.7.1-4 affected versions curl-8.7.1-4 CVE-ID: CVE-2024-11053 BDU-ID: 2024-11106 CVE-Crit: CRITICAL CVE-DESC.: A vulnerability in the netrc file handler of the cURL command line utility is related to insufficient protection of servic...