Italian hotels breached for tens of thousands of scanned IDs

The Computer Emergency Response Team CERT for Italy's "Agenzia per l’Italia Digitale" AGID issued a warning that cybercriminals are selling stolen identity documents from hotels operating in Italy. This summer, a criminal hacker group named “mydocs” infiltrated the booking systems of at least ten...

CVE-2025-54809

F5 Access for Android before version 3.1.2 which uses HTTPS does not verify the remote endpoint identity. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

Security Bulletin: A security vulnerability has been discovered in IBM Verify Identity Access OIDC Provider (CVE-2024-56171)

Summary A security vulnerability has been addressed in IBM Verify Identity Access OIDC Provider Vulnerability Details CVEID:CVE-2024-56171 DESCRIPTION: libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in...

Linux Distros Unpatched Vulnerability : CVE-2023-53048

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: typec: tcpm: fix warning when handle discoveridentity message Since both source and sink device can send discoveridentity message in PD3, kernel may dump...

WordPress Eventin plugin elevation of privilege vulnerability

WordPress Eventin plugin is an event management plugin designed for WordPress that supports event creation, registration, ticketing and calendar synchronization for offline, online and mixed event management. An elevation of privilege vulnerability exists in WordPress Eventin plugin, which stems...

MAL-2025-6905 Malicious code in @identity-authn/authn-js-sdk (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in @identity-authn/authn-js-sdk (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in identity_cache (npm)

The package identitycache was found to contain malicious code...

Malicious code in caretta-identity (npm)

The package caretta-identity was found to contain malicious code...

MAL-2025-32880 Malicious code in secure_identity_login_module (npm)

The package secureidentityloginmodule was found to contain malicious code...

MAL-2025-16548 Malicious code in caretta-identity (npm)

The package caretta-identity was found to contain malicious code...

MAL-2025-22968 Malicious code in identity_cache (npm)

The package identitycache was found to contain malicious code...

MAL-2025-32786 Malicious code in schibsted-identity-sdk (npm)

The package schibsted-identity-sdk was found to contain malicious code...

Malicious code in schibsted-identity-sdk (npm)

The package schibsted-identity-sdk was found to contain malicious code...

Malicious code in identity-frontend-common (npm)

The package identity-frontend-common was found to contain malicious code...

MAL-2025-22967 Malicious code in identity-frontend-common (npm)

The package identity-frontend-common was found to contain malicious code...

libxml2: Out-of-bounds Read in xmlSchemaIDCFillNodeTables

A flaw was found in the libxml2 library. A heap-based underflow can be triggered when a crafted XML document is validated against an XML schema with certain identity constraints or when a crafted XML schema is used, causing a crash to the application linked to the library and resulting in a denia...

SUSE CVE-2025-53942

authentik is an open-source Identity Provider that emphasizes flexibility and versatility, with support for a wide set of protocols. In versions 2025.4.4 and earlier, as well as versions 2025.6.0-rc1 through 2025.6.3, deactivated users who registered through OAuth/SAML or linked their accounts to...

Searching for Privacy Risks in LLM Agents Via Simulation

The widespread deployment of LLM-based agents is likely to introduce a critical privacy threat: malicious agents that proactively engage others in multi-turn interactions to extract sensitive information. These dynamic dialogues enable adaptive attack strategies that can cause severe privacy...

EulerOS 2.0 SP13 : libxml2 (EulerOS-SA-2025-1995)

According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap- based buffer under-read. To exploit thi...