RHEL 8 : sssd (RHSA-2025:19849)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:19849 advisory. The System Security Services Daemon SSSD service provides a set of daemons to manage access to remote directories and authentication mechanisms. It...

RHEL 8 : sssd (RHSA-2025:19853)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:19853 advisory. The System Security Services Daemon SSSD service provides a set of daemons to manage access to remote directories and authentication mechanisms. It...

MAL-2025-49376 Malicious code in solara-websocket-dll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f7987caa0572ba7ba558b028e0c1e8c9fe84db279417057afc890d78435b290 The package solara-websocket-dll was found to contain malicious code. Source: ghsa-malware...

Malicious code in vite-smart-chunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03c305ef00e7f688f3c3a3f647f19aa629de8f81c0f2d9a2d96ac673edfca0f1 The package vite-smart-chunk was found to contain malicious code. Source: ghsa-malware 87ee583206ce0948a7c052ee600515c370f53dffe893e50730ff8ad8f353e2...

MAL-2025-49372 Malicious code in vite-smart-chunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03c305ef00e7f688f3c3a3f647f19aa629de8f81c0f2d9a2d96ac673edfca0f1 The package vite-smart-chunk was found to contain malicious code. Source: ghsa-malware 87ee583206ce0948a7c052ee600515c370f53dffe893e50730ff8ad8f353e2...

Malicious code in tailwindcss-setgrid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93eb88871de8cbfe103fec17c4c5163ae5a13442ccfd299638f3fba98c266755 The package tailwindcss-setgrid was found to contain malicious code. Source: ghsa-malware...

​​Securing critical infrastructure: Why Europe’s risk-based regulations matter

The Deputy CISO blog series is where Microsoft Deputy Chief Information Security Officers CISOs share their thoughts on what is most important in their respective domains. In this series, you will get practical advice, tactics to start and stop deploying, forward-looking commentary on where the...

CVE-2025-47151

A type confusion vulnerability exists in the lassonodeimplinitfromxml functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML response can lead to an arbitrary code execution. An attacker can send a malformed SAML response to trigger this vulnerability...

CVE-2025-59250 vulnerabilities

Vulnerabilities for packages: apicurio-registry, tez...

CVE-2025-43432

A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash. Mitigation Do not process or load untrusted web content with WebKitGTK. In Red Hat Enterprise Linux 7, the following packag...

CVE-2025-43345

A correctness issue was addressed with improved checks. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An app may be able to access sensitive user data...

CVE-2025-43440

A flaw was found in WebKitGTK. Processing malicious web content can cause JIT issues due to improper checks and result in an unexpected process crash. Mitigation Do not process or load untrusted web content with WebKitGTK. In Red Hat Enterprise Linux 7, the following packages require WebKitGTK4:...

[SECURITY] Fedora 43 Update: python-platformio-6.1.18-7.fc43

PlatformIO is a cross-platform, cross-architecture, multiple framework, professional tool for embedded systems engineers and for software developers who write applications for embedded products...

Linux Distros Unpatched Vulnerability : CVE-2025-10966

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - curl's code for managing SSH connections when SFTP was done using the wolfSSH powered backend was flawed and missed host verification mechanisms. This prevents...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-989920)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989920 advisory. In the Linux kernel, the following vulnerability has been resolved: Squashfs: fix handling and sanity checking of xattrids count A Sysbot 1 corrupted filesystem...

The vulnerability of the Windows Update Service affects Microsoft Windows operating systems, allowing attackers to exploit their privileges.

The vulnerability of the Windows Update Service in Microsoft Windows operating systems is related to an incorrect interpretation of symbolic links before accessing the file. Exploiting this vulnerability can allow an attacker to increase their privileges...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990001)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990001 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSD: prevent integer overflow on 32 bit systems On a 32 bit system, the len sizeofp operation ca...

CVE-2025-64118 vulnerabilities

Vulnerabilities for packages: node-gyp, renovate...

CVE-2025-64118 vulnerabilities

Vulnerabilities for packages: node-gyp, renovate...

Cybercriminals Targeting Payroll Sites

Microsoft is warning of a scam involving online payroll systems. Criminals use social engineering to steal people's credentials, and then divert direct deposits into accounts that they control. Sometimes they do other things to make it harder for the victim to realize what is happening. I feel li...