The vulnerability in the dpu_crtc_reset() function of the drivers/gpu/drm/msm/disp/dpu1/dpu_crtc.c driver module of the Direct Rendering Infrastructure (DRI) kernel of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the dpucrtcreset function in the drivers/gpu/drm/msm/disp/dpu1/dpucrtc.c file of the Direct Rendering Infrastructure DRI driver in the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the msm_hdmi_init() function in the drivers/gpu/drm/msm/hdmi/hdmi.c driver of the Direct Rendering Infrastructure (DRI) kernel of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the msmhdmiinit function in the drivers/gpu/drm/msm/hdmi/hdmi.c driver for the Direct Rendering Infrastructure DRI component of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failur...

hays-london-azure-platform-2-poc

Hays London Azure Platform Engineer POC — AKS Operations & Pla...

Security Notice: Impact of CVE-2026-33634 on ownCloud Build Infrastructure - ownCloud

No customer data was compromised. No source code was altered. The attack affected our build infrastructure only – specifically the systems that produce container images and client binaries. If you are using a build before March 19th, no action is needed If you are using ocis-rolling image conta...

How Microsoft Defender protects high-value assets in real-world attack scenarios

In this article 1. Using asset context to strengthen detection 2. How high-value asset protection works 3. Real-world high-value asset protection scenarios 4. Protecting your HVAs 5. Learn more High-value assets including domain controllers, web servers, and identity infrastructure are frequent...

CVE-2025-15612 Wazuh Provisioning Scripts / Build Infrastructure Improper Certificate Validation leading to MITM and RCE

Wazuh provisioning scripts and Dockerfiles contain an insecure transport vulnerability where curl is invoked with the -k/--insecure flag, disabling SSL/TLS certificate validation. Attackers with network access can perform man-in-the-middle attacks to intercept and modify downloaded dependencies o...

CVE-2025-15612 Wazuh Provisioning Scripts / Build Infrastructure Improper Certificate Validation leading to MITM and RCE

Wazuh provisioning scripts and Dockerfiles contain an insecure transport vulnerability where curl is invoked with the -k/--insecure flag, disabling SSL/TLS certificate validation. Attackers with network access can perform man-in-the-middle attacks to intercept and modify downloaded dependencies o...

Criminals are renting virtual phones to bypass bank security

Researchers at Group-IB warn about criminals using virtual Android devices to bypass modern security solutions. Cloud phones are virtual Android devices that can fully mimic real device fingerprints model, hardware, IP, timezone, sensor data, behavior. This allows them to undermine banks’...

forman: Foreman: Remote Code Execution via command injection in WebSocket proxy

A flaw was found in Foreman. A remote attacker could exploit a command injection vulnerability in Foreman's WebSocket proxy implementation. This vulnerability arises from the system's use of unsanitized hostname values from compute resource providers when constructing shell commands. By operating...

CVE-2026-25186

Exposure of sensitive information to an unauthorized actor in Windows Accessibility Infrastructure ATBroker.exe allows an authorized attacker to disclose information locally...

CVE-2026-21994

Vulnerability in the Oracle Edge Cloud Infrastructure Designer and Visualisation Toolkit product of Oracle Open Source Projects component: Desktop. The supported version that is affected is 0.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2026-24291

Incorrect permission assignment for critical resource in Windows Accessibility Infrastructure ATBroker.exe allows an authorized attacker to elevate privileges locally...

BPFdoor in Telecom Networks: Sleeper Cells in the Backbone

Executive overview The strategic positioning of covert access within the world’s telecommunication networks A months-long investigation by Rapid7 Labs has uncovered evidence of an advanced China-nexus threat actor, Red Menshen, placing some of the stealthiest digital sleeper cells the team has ev...

PT-2026-28374

Name of the Vulnerable Software and Affected Versions SolarWinds Observability Self-Hosted affected versions not specified Description The software is subject to a stored cross-site scripting issue. Successful exploitation may result in unintended script execution. The impact is limited by a...

The vulnerability of the mtk_ovl_layer_off() function in the drivers/gpu/drm/mediatek/mtk_disp_drv.h driver module allows a hacker to cause a service failure. This vulnerability relates to the Direct Rendering Infrastructure (DRI) support for Mediatek graphics cards in Linux operating systems.

The vulnerability of the mtkovllayeroff function in the drivers/gpu/drm/mediatek/mtkdispdrv.h file, a driver for supporting Direct Rendering Infrastructure DRI in Mediatek graphics cards, related to Linux operating systems, stems from improper resource cleanup or release. Exploiting this...

The vulnerability of the functions rk3288_lvds_poweron() and px30_lvds_poweron() in the drivers/gpu/drm/rockchip/rockchip_lvds.c driver of the Direct Rendering Infrastructure (DRI) kernel of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the functions rk3288lvdspoweron and px30lvdspoweron in the drivers/gpu/drm/rockchip/rockchiplvds.c driver of the Direct Rendering Infrastructure DRI subsystem of the Linux operating system is related to errors during link counters updates. Exploiting this vulnerability can...

The vulnerability of the xe_device_sysfs_init() function in the drivers/gpu/drm/xe/xe_device_sysfs.c file of the Direct Rendering Infrastructure (DRI) driver module in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the xedevicesysfsinit function in the drivers/gpu/drm/xe/xedevicesysfs.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to an attempt to access inaccessible registers. Exploiting this vulnerability could allow a attacker to cau...

The vulnerability of the mdp5_planeDestroyState() function in the drivers/gpu/drm/msm/disp/mdp5/mdp5_plane.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a malicious actor to cause a service failure.

The vulnerability of the mdp5planeDestroyState function in the drivers/gpu/drm/msm/disp/mdp5/mdp5plane.c file of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability can allow an...

Pawn Storm Campaign Deploys PRISMEX, Targets Government and Critical Infrastructure Entities

This blog discusses the steganography, cloud abuse, and email-based backdoors used against the Ukrainian defense supply chain in the latest Pawn Storm campaign that TrendAI™ Research observed and analyzed...

EUVD-2026-15186

Cross-Site Scripting vulnerability in Hitachi Infrastructure Analytics Advisor Analytics probe component, Hitachi Ops Center Analyzer.This issue affects Hitachi Infrastructure Analytics Advisor:; Hitachi Ops Center Analyzer: from 10.0.0-00 before 11.0.5-00...