When the Base Station Flies: Rethinking Security for UAV-Based 6G Networks

The integration of non-terrestrial networks NTNs into 6G systems is crucial for achieving seamless global coverage, particularly in underserved and disaster-prone regions. Among NTN platforms, unmanned aerial vehicles UAVs are especially promising due to their rapid deployability. However, this...

The vulnerability of the Avahi service detection system in local networks arises from the use of insufficiently random values, allowing attackers to influence the confidentiality of the protected information.

The vulnerability of the Avahi service detection system in local networks is related to the use of insufficiently random values. Exploiting this vulnerability allows a malicious actor to influence the confidentiality of protected information by using specially crafted DNS requests, while using a...

Langflow vulnerable to Server-Side Request Forgery

Vulnerability Overview Langflow provides an API Request component that can issue arbitrary HTTP requests within a flow. This component takes a user-supplied URL, performs only normalization and basic format checks, and then sends the request using a server-side httpx client. It does not block...

Criminal IP and Palo Alto Networks Cortex XSOAR integrate to bring AI-driven exposure intelligence to automated incident response

Torrance, United States / California, 19th December 2025, CyberNewsWire...

CVE-2025-68459

RG - AP180, Indoor Wall Plate Wireless AP AP180 series provided by Ruijie Networks Co., Ltd. contain an OS command injection vulnerability. An arbitrary OS command may be executed on the product by an attacker who logs in to the CLI service...

[SECURITY] Fedora 42 Update: NetworkManager-1.52.2-1.fc42

NetworkManager is a system service that manages network interfaces and connections based on user or automatic configuration. It supports Ethernet, Bridge, Bond, VLAN, Team, InfiniBand, Wi-Fi, mobile broadband WWAN, PPPoE and other devices, and supports a variety of different VPN services...

PROVEX: Enhancing SOC Analyst Trust with Explainable Provenance-Based IDS

Modern intrusion detection systems IDS leverage graph neural networks GNNs to detect malicious activity in system provenance data, but their decisions often remain a black box to analysts. This paper presents a comprehensive XAI framework designed to bridge the trust gap in Security Operations...

oarepo (>=9.0.10, <=9.0.16), spatial-networks (>=0.0.4, <=0.0.7) +1 more potentially affected by CVE-2025-53000 via nbconvert (6.5.3)

nbconvert PYPI version 6.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on nbconvert and may be impacted: - oarepo =9.0.10, =0.0.4, =0.0.7 - testing-tools 0.0.1 Source cves: CVE-2025-53000 Source advisory: OSV:GHSA-XM59-RQC7-HHVF...

DEBIAN-CVE-2025-59529

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In versions up to and including 0.9-rc2, the simple protocol server ignores the documented client limit and accepts unlimited connections, allowing for easy local DoS. Although CLIENTSMAX ...

Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electrics Products

RISK EVALUATION Successful exploitation of this vulnerability could result in denial-of-service DoS, information tampering, and information disclosure. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as:...

CVE-2025-68459

The CVE-2025-68459 affects Ruijie Networks AP180 series (RG-AP180 indoor wall plate). The vulnerability is an OS command injection via the CLI service, enabling an attacker who can log in to the device to execute arbitrary OS commands. Impact is described as high for confidentiality, integrity, a...

CVE-2025-68459

RG - AP180, Indoor Wall Plate Wireless AP AP180 series provided by Ruijie Networks Co., Ltd. contain an OS command injection vulnerability. An arbitrary OS command may be executed on the product by an attacker who logs in to the CLI service...

Nozomi Networks Guardian 路径遍历漏洞

Nozomi Networks Guardian is a protection software from Nozomi Networks, Inc. Nozomi Networks Guardian suffers from a path traversal vulnerability that stems from insufficient validation of input files, which could lead to a path traversal attack...

Nozomi Networks Guardian 跨站脚本漏洞

Nozomi Networks Guardian is a protection software from Nozomi Networks, Inc. A cross-site scripting vulnerability exists in Nozomi Networks Guardian that stems from improper validation of input parameters and could lead to a stored cross-site scripting attack...

Nozomi Networks Guardian 跨站脚本漏洞

Nozomi Networks Guardian is a protection software from Nozomi Networks, Inc. Nozomi Networks Guardian suffers from a cross-site scripting vulnerability that stems from improper validation of network traffic data, which could lead to HTML injection attacks...

Nozomi Networks Guardian 跨站脚本漏洞

Nozomi Networks Guardian is a protection software from Nozomi Networks, Inc. Nozomi Networks Guardian suffers from a cross-site scripting vulnerability that stems from improper validation of network traffic data, which could lead to HTML injection attacks...

EUVD-2025-204006

Zerobyte is a backup automation tool Zerobyte versions prior to 0.18.5 and 0.19.0 contain an authentication bypass vulnerability where authentication middleware is not properly applied to API endpoints. This results in certain API endpoints being accessible without valid session credentials. This...

Quantum Machine Learning for Cybersecurity: A Taxonomy and Future Directions

The increasing number of cyber threats and rapidly evolving tactics, as well as the high volume of data in recent years, have caused classical machine learning, rules, and signature-based defence strategies to fail, rendering them unable to keep up. An alternative, Quantum Machine Learning QML, h...

Analysing Multidisciplinary Approaches to Fight Large-Scale Digital Influence Operations

Crime as a Service CaaS has evolved from isolated criminal incidents to a broad spectrum of illicit activities, including social media manipulation, foreign information manipulation and interference FIMI, and the sale of disinformation toolkits. This article analyses how threat actors exploit...

The vulnerability of the software for providing secure remote access to data in Palo Alto Networks’ GlobalProtect App is related to errors in the certificate validation process. This allows a malicious actor to create malicious certificates.

The vulnerability of the software for providing secure remote access to data in the Palo Alto Networks GlobalProtect App is related to errors in the certificate validation process. Exploiting this vulnerability allows a malicious actor to create malicious certificates from a remote location...