335 matches found
Trend & AWS Partner on Cloud IPS: One-Click Protection
In the race to secure cloud infrastructure, intrusion prevention systems IPS remain one of the most critical yet complex at the cloud network layer of defense. For many organizations, deploying IPS in the cloud is a balancing act between agility and control...
Researchers Find ChatGPT Vulnerabilities That Let Attackers Trick AI Into Leaking Data
Cybersecurity researchers have disclosed a new set of vulnerabilities impacting OpenAI's ChatGPT artificial intelligence AI chatbot that could be exploited by an attacker to steal personal information from users' memories and chat histories without their knowledge. The seven vulnerabilities and...
CVE-2025-61929
Cherry Studio is affected by a code-injection vulnerability where the cherrystudio://mcp protocol handler parses base64-encoded configuration data and directly executes the contained command. Affected component paths include src/main/services/ProtocolClient.ts and src/main/services/urlschema/mcp-...
CVE-2025-61929 Cherry Studio allows one-click on a specific URL to cause a command to execute
Cherry Studio is a desktop client that supports for multiple LLM providers. Cherry Studio registers a custom protocol called cherrystudio://. When handling the MCP installation URL, it parses the base64-encoded configuration data and directly executes the command within it. In the files...
CVE-2025-61929 Cherry Studio allows one-click on a specific URL to cause a command to execute
Cherry Studio is a desktop client that supports for multiple LLM providers. Cherry Studio registers a custom protocol called cherrystudio://. When handling the MCP installation URL, it parses the base64-encoded configuration data and directly executes the command within it. In the files...
CVE-2025-61929 Cherry Studio allows one-click on a specific URL to cause a command to execute
Cherry Studio is a desktop client that supports for multiple LLM providers. Cherry Studio registers a custom protocol called cherrystudio://. When handling the MCP installation URL, it parses the base64-encoded configuration data and directly executes the command within it. In the files...
California just put people back in control of their data
California's 2025 legislative session closed with 14 new privacy and AI-related bills. We’d like to highlight a few of the most relevant signed bills and encourage other states and countries to follow California’s example. Let’s go over some of the bills that were signed by the governor and how...
EUVD-2011-4479
Malware in sbrugna...
EUVD-2019-6745
Malware in sbrugna...
EUVD-2011-4596
Malware in sbrugna...
EUVD-2011-4481
Malware in sbrugna...
EUVD-2011-4478
Malware in sbrugna...
EUVD-2011-4595
Malware in sbrugna...
EUVD-2014-3135
Malware in sbrugna...
EUVD-2025-30197
Malicious code in bioql PyPI...
EUVD-2025-27171
Malicious code in bioql PyPI...
EUVD-2023-32705
Malicious code in bioql PyPI...
EUVD-2025-25237
Malicious code in bioql PyPI...