7461 matches found
CVE-2025-35998
Missing protection mechanism for alternate hardware interface in the IntelR Quick Assist Technology for some IntelR Platforms within Ring 0: Kernel may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalation of...
PT-2026-7293
Name of the Vulnerable Software and Affected Versions IntelR Platform affected versions not specified Description A loop with an unreachable exit condition, potentially leading to an infinite loop, exists within Ring 0 of the kernel on some Intel platforms. This could allow a system software...
AMD Graphics Driver February 2026 Security Update
AMD has informed HP of potential vulnerabilities in some AMD Graphics Driver for Windows, which might allow arbitrary code execution, loss of confidentiality, loss of integrity, loss of availability, kernel memory corruption, denial of service, or information disclosure. AMD is releasing software...
Intel Graphics Software February 2026 Security Update
Intel has informed HP of potential security vulnerabilities for some Intel® Graphics software, which might allow escalation of privilege or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Intel has released updates to mitigate the potential...
Intel® Server Firmware Advisory
Summary: A potential security vulnerability for some Intel® Platforms may allow denial of service. Intel is releasing microcode updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-27560 Description: Loop with unreachable exit condition 'infinite loop' for some...
Intel Processor Firmware February 2026 Security Update
Intel has informed HP of a potential security vulnerability in some Intel® Processors, which might allow escalation of privilege. Intel is releasing microcode updates to mitigate this potential vulnerability. Intel has released updates to mitigate the potential vulnerability. HP has identified...
Intel Chipset Firmware February 2026 Security Update
Intel has informed HP of potential security vulnerabilities in some Intel® Converged Security and Management Engine Intel® CSME, some Intel® Active Management Technology Intel® AMT, and some Intel® Standard Manageability, which might allow denial of service or information disclosure. Intel is...
CVE-2026-22903
creationtimestamp| type| source ---|---|--- 2026-02-09 08:18:33+00:00| seen| https://infosec.exchange/users/certvde/statuses/116039686717106372 2026-02-09 08:26:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mefzlumhku22...
CVE-2026-2192
creationtimestamp| type| source ---|---|--- 2026-02-09 00:00:51+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mef5eikujt2e 2026-02-09 00:01:00+00:00| seen| https://infosec.exchange/users/offseq/statuses/116037730204820286...
CVE-2026-2152
creationtimestamp| type| source ---|---|--- 2026-02-08 13:30:32+00:00| seen| https://infosec.exchange/users/offseq/statuses/116035251770655833 2026-02-08 13:30:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mee25goix22b 2026-02-08 23:43:08+00:00| seen|...
Common Crypto Scams and How to Protect Your Funds in 2026
Crypto scams are surging worldwide, from pig butchering to fake trading platforms and deepfakes, draining victims while fraud teams struggle to keep up...
The Buyer’s Guide to AI Usage Control
Today’s “AI everywhere” reality is woven into everyday workflows across the enterprise, embedded in SaaS platforms, browsers, copilots, extensions, and a rapidly expanding universe of shadow tools that appear faster than security teams can track. Yet most organizations still rely on legacy contro...
PT-2026-6599
Name of the Vulnerable Software and Affected Versions Moxa Arm-based industrial computers running Moxa Industrial Linux Secure affected versions not specified Description Moxa Arm-based industrial computers running Moxa Industrial Linux Secure utilize a device-unique bootloader password provided ...
Phishing Campaigns Abuse Trusted Cloud Platforms, Raising New Risks for Enterprises
ANY.RUN experts report a surge in phishing campaigns abusing trusted cloud and CDN platforms to bypass security controls and target enterprise users...
Infostealers without borders: macOS, Python stealers, and platform abuse
Infostealer threats are rapidly expanding beyond traditional Windows-focused campaigns, increasingly targeting macOS environments, leveraging cross-platform languages such as Python, and abusing trusted platforms and utilities to silently deliver credential-stealing malware at scale. Since late...
CVE-2026-25487
creationtimestamp| type| source ---|---|--- 2026-02-02 20:59:03+00:00| published-proof-of-concept| https://github.com/craftcms/commerce/security/advisories/GHSA-wqc5-485v-3hqh 2026-03-23 15:20:38+00:00| seen| https://mastodon.social/ap/users/115426718704364579/statuses/116279164131270309 2026-03-...
Mandiant Finds ShinyHunters-Style Vishing Attacks Stealing MFA to Breach SaaS Platforms
Google-owned Mandiant on Friday said it identified an "expansion in threat activity" that uses tradecraft consistent with extortion-themed attacks orchestrated by a financially motivated hacking group known as ShinyHunters. The attacks leverage advanced voice phishing aka vishing and bogus...
Researchers Uncover Chrome Extensions Abusing Affiliate Links and Stealing ChatGPT Access
Cybersecurity researchers have discovered malicious Google Chrome extensions that come with capabilities to hijack affiliate links, steal data, and collect OpenAI ChatGPT authentication tokens. One of the extensions in question is Amazon Ads Blocker ID: pnpchphmplpdimbllknjoiopmfphellj, which...
CVE-2025-46316
An out-of-bounds read was addressed with improved input validation. This issue is fixed in Pages 15.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1. Processing a maliciously crafted Pages document may result in unexpected termination or disclosure of process memory...
