Lucene search
K

1309 matches found

The Hacker News
The Hacker News
added 2025/04/03 11:25 a.m.9 views

AI Threats Are Evolving Fast — Learn Practical Defense Tactics in this Expert Webinar

The rules have changed. Again. Artificial intelligence is bringing powerful new tools to businesses. But it's also giving cybercriminals smarter ways to attack. They're moving quicker, targeting more precisely, and slipping past old defenses without being noticed. And here's the harsh truth: If...

7.1AI score
Exploits0
Rapid7 Blog
Rapid7 Blog
added 2025/04/02 4:48 p.m.10 views

Preview the Action: Two New Sessions Available Before Take Command 2025

Take Command 2025 is packed with insights from cybersecurity experts, threat intelligence leaders, and hands-on practitioners. But you don’t have to wait until April 9 to start learning. Two exclusive sessions are now available on-demand — giving you early access to critical content designed to...

7.6AI score
Exploits0
Schneier on Security
Schneier on Security
added 2025/03/26 11:7 a.m.8 views

AI Data Poisoning

Cloudflare has a new feature--available to free users as well--that uses AI to generate random pages to feed to AI web crawlers: Instead of simply blocking bots, Cloudflare's new system lures them into a "maze" of realistic-looking but irrelevant pages, wasting the crawler's computing resources...

6.9AI score
Exploits0
Akamai Blog
Akamai Blog
added 2025/03/24 1:0 p.m.8 views

Akamai’s Channel-First Strategy: Driving Partner Success in 2025

Customer success is Akamai’s priority — and our many industry awards highlight how we've empowered our partners to thrive. See what we have planned for 2025...

7AI score
Exploits0
The Hacker News
The Hacker News
added 2025/03/14 11:0 a.m.14 views

Why Most Microsegmentation Projects Fail—And How Andelyn Biosciences Got It Right

Most microsegmentation projects fail before they even get off the ground—too complex, too slow, too disruptive. But Andelyn Biosciences proved it doesn't have to be that way. Microsegmentation: The Missing Piece in Zero Trust Security Security teams today are under constant pressure to defend...

7AI score
Exploits0
Lenovo
Lenovo
added 2025/03/11 3:0 p.m.3 views

Synaptics Audio Driver Vulnerability - Lenovo Support US

No description provided...

8.9AI score
Exploits0
Lenovo
Lenovo
added 2025/03/11 2:51 p.m.5 views

AMI MegaRAC SPx Redfish Authentication Bypass - Lenovo Support US

No description provided...

7.3AI score
Exploits0
Lenovo
Lenovo
added 2025/03/11 2:40 p.m.12 views

Multi-Vendor BIOS Security Vulnerabilities (March 2025) - Lenovo Support US

No description provided...

7.2AI score
Exploits0
Qualys Blog
Qualys Blog
added 2025/03/10 4:0 p.m.7 views

Steps to TruRisk™ – 1: Shift to Priority-Driven Strategies

“If you know the enemy and know yourself, you need not fear the result of a hundred battles.” — Sun Tzu Security and IT teams are drowning in alerts, scrambling to patch everything they can, yet breaches still happen. Not all vulnerabilities pose the same risk. While reducing totals may seem like...

7.4AI score
Exploits0
The Hacker News
The Hacker News
added 2025/03/10 11:0 a.m.14 views

Why The Modern Google Workspace Needs Unified Security

The Need For Unified Security Google Workspace is where teams collaborate, share ideas, and get work done. But while it makes work easier, it also creates new security challenges. Cybercriminals are constantly evolving, finding ways to exploit misconfigurations, steal sensitive data, and hijack...

7AI score
Exploits0
The Hacker News
The Hacker News
added 2025/03/07 11:35 a.m.21 views

Webinar: Learn How ASPM Transforms Application Security from Reactive to Proactive

Are you tired of dealing with outdated security tools that never seem to give you the full picture? You're not alone. Many organizations struggle with piecing together scattered information, leaving your apps vulnerable to modern threats. That's why we're excited to introduce a smarter, unified...

7.7AI score
Exploits0
CVE
CVE
added 2025/02/27 8:0 p.m.52 views

CVE-2024-58042

CVE-2024-58042 relates to the Linux kernel and fixes a potential deadlock in rhashtable growth logic. The original implementation could trigger a deadlock chain involving nested locks between the rhashtable bucket, rq lock, and dsq lock. The fix moves the hash table growth check and work scheduli...

5.5CVSS6.5AI score0.00153EPSS
Exploits0References3Affected Software1
SUSE CVE
SUSE CVE
added 2025/02/27 3:11 a.m.2 views

SUSE CVE-2022-49124

In the Linux kernel, the following vulnerability has been resolved: x86/mce: Work around an erratum on fast string copy instructions A rare kernel panic scenario can happen when the following conditions are met due to an erratum on fast string copy instructions: 1 An uncorrected error. 2 That err...

4.1CVSS7.8AI score0.00238EPSS
Exploits0References4
The Hacker News
The Hacker News
added 2025/02/17 11:0 a.m.14 views

CISO's Expert Guide To CTEM And Why It Matters

Cyber threats evolve—has your defense strategy kept up? A new free guide available here explains why Continuous Threat Exposure Management CTEM is the smart approach for proactive cybersecurity. This concise report makes a clear business case for why CTEM's comprehensive approach is the best...

7.3AI score
Exploits0
NVD
NVD
added 2025/02/11 7:15 p.m.15 views

CVE-2025-25202

Ash Authentication is an authentication framework for Elixir applications. Applications which have been bootstrapped by the igniter installer present since AshAuthentication v4.1.0 and who have used the magic link strategy or are manually revoking tokens are affected by revoked tokens being allow...

6.5CVSS0.00288EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2025/02/11 6:28 p.m.7 views

CVE-2025-25202 Ash Authentication has flawed token revocation checking logic in actions generated by `mix ash_authentication.install`

Ash Authentication is an authentication framework for Elixir applications. Applications which have been bootstrapped by the igniter installer present since AshAuthentication v4.1.0 and who have used the magic link strategy or are manually revoking tokens are affected by revoked tokens being allow...

6.3CVSS6.6AI score0.00288EPSS
Exploits1References2
CVE
CVE
added 2025/02/11 6:28 p.m.2284 views

CVE-2025-25202

CVE-2025-25202 affects Ash Authentication (Elixir) in installations bootstrapped with the igniter installer from v4.1.0 up to but not including v4.4.9. The issue is that magic link tokens—as well as tokens revoked manually—could be verified as valid even after revocation, effectively making magic...

6.5CVSS6.6AI score0.00288EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2025/02/11 6:28 p.m.18 views

CVE-2025-25202 Ash Authentication has flawed token revocation checking logic in actions generated by `mix ash_authentication.install`

Ash Authentication is an authentication framework for Elixir applications. Applications which have been bootstrapped by the igniter installer present since AshAuthentication v4.1.0 and who have used the magic link strategy or are manually revoking tokens are affected by revoked tokens being allow...

6.3CVSS0.00288EPSS
Exploits1References2
OSV
OSV
added 2025/02/11 6:28 p.m.7 views

CVE-2025-25202 Ash Authentication has flawed token revocation checking logic in actions generated by `mix ash_authentication.install`

Ash Authentication is an authentication framework for Elixir applications. Applications which have been bootstrapped by the igniter installer present since AshAuthentication v4.1.0 and who have used the magic link strategy or are manually revoking tokens are affected by revoked tokens being allow...

6.3CVSS6.8AI score0.00288EPSS
Exploits1References4
Lenovo
Lenovo
added 2025/02/11 1:12 a.m.12 views

Intel Graphics Software Advisory - Lenovo Support US

No description provided...

7.3AI score
Exploits0
Rows per page
Query Builder