CVE-2026-16373

Information disclosure in the Privacy component in Firefox for Android. This vulnerability was fixed in Firefox 153...

CVE-2026-16373

Information disclosure in the Privacy component in Firefox for Android. This vulnerability was fixed in Firefox 153...

CVE-2026-16373 Information disclosure in the Privacy component in Firefox for Android

Information disclosure in the Privacy component in Firefox for Android. This vulnerability was fixed in Firefox 153...

CVE-2026-16373 Information disclosure in the Privacy component in Firefox for Android

Information disclosure in the Privacy component in Firefox for Android. This vulnerability was fixed in Firefox 153...

EUVD-2026-46209

Information disclosure in the Privacy component in Firefox for Android. This vulnerability was fixed in Firefox 153...

PT-2026-61836

The Classified Listing WordPress plugin before 5.3.9 does not verify that the order targeted by its payment-receipt handler belongs to the requesting user, allowing authenticated users with subscriber-level access to read the payment receipt details of any other user's order...

PT-2026-61885

Name of the Vulnerable Software and Affected Versions Firefox for Android versions prior to 153 Description An information disclosure issue exists within the Privacy component, which could allow sensitive data to be exposed. Recommendations Update to version 153...

CVE-2026-16373: Exposure of Sensitive Information to an Unauthorized Actor

Information disclosure in the Privacy component in Firefox for Android. This vulnerability was fixed in Firefox 153...

CVE-2026-32819

dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and framework rules, before and including version 25.07.3, a Standard user can enumerate other users' names and email addresses...

USN-8569-1: Linux kernel (HWE) vulnerabilities

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. CVE-2025-54505 It was discovered that some AMD Zen 2 processors did not properly isolate shared...

PT-2026-61626

dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and framework rules, before and including version 25.07.3, a Standard user can enumerate other users' names and email addresses...

Malicious code in twiliointernal-messaging-toolbox (npm)

The twiliointernal-messaging-toolbox package is a dependency-confusion squat of Twilio's npm namespace published by user 'yuva2210' maintainer email [email protected] at sentinel versions 99.99.99 and 99.99.100, chosen to outrank any internal/private version and win resolution against a...

RRAM-DP: Device-Calibrated Differential Privacy for In-Memory Edge Learning

Edge Artificial Intelligence of Things AIoT systems often collect sensitive data in situ, raising serious privacy concerns. Resistive-switching random-access memory RRAM is an attractive substrate for efficient AIoT thanks to its multi-bit storage and compute-in-memory CiM capabilities, while its...

Federated Learning and LLM-Driven Threat Intelligence for Zero Trust IoT Architecture

While the Internet of Things IoT has become essential, they introduced serious security and privacy challenges, especially for mission-critical environments. Legacy devices are vulnerable to viruses, data breaches, and unauthorized access, and updating these devices would be infeasibly costly. As...

Code-Poisoning Property Inference Attacks

The flourishing code hosting platforms and coding agents enable even beginners with private data to build tailored Machine Learning ML models using available code quickly. The training data for ML models, often regarded as private property e.g., clinical records, transaction information, is at...

CVE-2026-57205

SimpleChat is a secure AI conversation application with personal and group workspaces for document-grounded interactions. Prior to 0.241.203, the authenticated GET /api/user/info/ and GET /api/user/profile-image/ endpoints in application/singleapp/routebackendusers.py accepted a caller-supplied...

CVE-2026-54568

Microsoft UFO open-source framework for intelligent automation across devices and platforms. From 3.0.0 until 3.0.6, a client connected to the UFO WebSocket server as a DEVICE could call DEVICEINFOREQUEST with another device's targetid and receive that device's server-side systeminfo through...

Protecting Privacy in an AI Era

Daniel Solove argues in the Wall Street Journal alternate link that giving people control of their personal data is not an effective way to regulate privacy in this era. Instead, we need to hold companies accountable for their actions, similar to what we do with food and drug companies. Measures...

The backlash against Flock cameras is spreading

Flock-style ALPR systems carry serious privacy and civil-liberties risks, and the backlash is now starting to show up in agency decisions too. For those not yet familiar with Flock, Flock Safety operates an automated license plate recognition ALPR system that uses cameras and computer vision to...

CVE-2026-35146 HCL DFXServer is affected by an Unencrypted Communication vulnerability.

HCL DFXServer is affected by an Unencrypted Communication vulnerability. The application permits users to establish connections over unencrypted channels via the HTTP protocol, which could allow a remote attacker to intercept network traffic and expose sensitive data transmitted between the user...