EUVD-2025-17031

Malicious code in bioql PyPI...

CVE-2025-59823

Project Gardener implements the automated management and operation of Kubernetes clusters as a service. Code injection may be possible in Gardener Extensions for AWS providers prior to version 1.64.0, Azure providers prior to version 1.55.0, OpenStack providers prior to version 1.49.0, and GCP...

Widespread Supply Chain Compromise Impacting npm Ecosystem

CISA is releasing this Alert to provide guidance in response to a widespread software supply chain compromise involving the world’s largest JavaScript registry, npmjs.com. A self-replicating worm—publicly known as “Shai-Hulud”—has compromised over 500 packages.i After gaining initial access, the...

Navigating SEBI’s Cloud Security Requirements: A Guide for Regulated Entities

Overview: Who is impacted: The Securities and Exchange Board of India SEBI is the primary regulatory authority for the securities market in India. It was established to protect investor interests and promote market development, but its guidelines also impact cybersecurity professionals at regulat...

Microsoft Azure 访问控制错误漏洞

Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from Microsoft Corporation USA. An access control error vulnerability exists in Microsoft Azure. An attacker can exploit the vulnerability to elevate privileges...

Microsoft Azure Connected Machine Agent 安全漏洞

Microsoft Azure Connected Machine Agent is a U.S.-based Microsoft Corporation's Microsoft ability to manage Windows and Linux computers hosted outside of Azure on a corporate network or other cloud provider. A security vulnerability exists in Microsoft Azure Connected Machine Agent. An attacker...

CVE-2025-55244

Azure Bot Service Elevation of Privilege Vulnerability...

KLA87341 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azure Bot Service can be exploited remotely to gain privileges. 2. An elevation ...

The Ongoing Fallout from a Breach at AI Chatbot Maker Salesloft

The recent mass-theft of authentication tokens from Salesloft , whose AI chatbot is used by a broad swath of corporate America to convert customer interaction into Salesforce leads, has left many companies racing to invalidate the stolen credentials before hackers can exploit them. Now Google war...

Microsoft Azure Databricks 访问控制错误漏洞

Microsoft Azure Databricks is an open analytics platform from Microsoft Corporation, USA. An access control error vulnerability exists in Microsoft Azure Databricks that stems from improper access control and could lead to elevation of privilege...

MAL-2025-6942 Malicious code in microsoft.azure.cognitiveservices.search.visualsearch (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-17325 Malicious code in com.microsoft.azure.spatial-anchors-sdk.core (npm)

The package com.microsoft.azure.spatial-anchors-sdk.core was found to contain malicious code...

Malicious code in com.microsoft.azure.spatial-anchors-sdk.windows (npm)

The package com.microsoft.azure.spatial-anchors-sdk.windows was found to contain malicious code...

Malicious code in com.microsoft.azure.spatial-anchors-sdk.ios (npm)

The package com.microsoft.azure.spatial-anchors-sdk.ios was found to contain malicious code...

MAL-2025-17327 Malicious code in com.microsoft.azure.spatial-anchors-sdk.windows (npm)

The package com.microsoft.azure.spatial-anchors-sdk.windows was found to contain malicious code...

CVE-2025-53729 Microsoft Azure File Sync Elevation of Privilege Vulnerability

...

Microsoft Azure 访问控制错误漏洞

Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from Microsoft Corporation USA. An access control error vulnerability exists in Microsoft Azure Virtual Machines. An attacker could exploit this vulnerability to perform spoofing attacks. The following products and...

Microsoft Azure Stack 安全漏洞

Microsoft Azure Stack is a hybrid cloud computing software solution based on the Azure cloud platform from Microsoft USA. The product supports building and deploying hybrid applications. A security vulnerability exists in Microsoft Azure Stack. An attacker exploiting the vulnerability could gain...

KLA86590 Multiple vulnerabilities in Microsoft SQL Server

Multiple vulnerabilities were found in Microsoft SQL Server. Malicious users can exploit these vulnerabilities to gain privileges. Original advisories CVE-2025-53727 CVE-2025-49758 CVE-2025-47954 CVE-2025-49759 CVE-2025-24999 Related products Microsoft-SQL-Server Microsoft-Azure CVE list...

Microsoft Azure 信息泄露漏洞

Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from Microsoft Corporation USA. An information disclosure vulnerability exists in Microsoft Azure Virtual Machines. An attacker exploiting this vulnerability could gain access to sensitive information. The following...