869 matches found
EUVD-2017-9091
Malware in sbrugna...
EUVD-2020-7242
Malware in sbrugna...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-391512)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-391512 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: Added NULL check for lookupatid The lookupatid function can return NULL if the ATID i...
EUVD-2025-26559
Malicious code in bioql PyPI...
EUVD-2025-28179
Malicious code in bioql PyPI...
EUVD-2024-21926
Malicious code in bioql PyPI...
CERTFR-2025-ACT-041
creationtimestamp| type| source ---|---|--- 2025-09-29 12:13:16+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3lzxybqnsqu2o 2025-09-29 13:00:57+00:00| seen| https://bsky.app/profile/infosecfr.skyfleet.blue/post/3lzy2wyuzsc2o...
U.K. Arrests Two Teen Scattered Spider Hackers Linked to August 2024 TfL Cyber Attack
Law enforcement authorities in the U.K. have arrested two teen members of the Scattered Spider hacking group in connection with their alleged participation in an August 2024 cyber attack targeting Transport for London TfL, the city's public transportation agency. Thalha Jubair aka EarthtoStar,...
“A dare, a challenge, a bit of fun:” Children are hacking their own schools’ systems, says study
As if ransomware wasn’t enough of a security problem for the sector, educational institutions also need to worry about their own students, a recent study shows. Last week, the UK Information Commissioner’s Office ICO published a report about the "insider threat of students". Here are a few key...
Lawsuit About WhatsApp Security
Attaullah Baig, WhatsApp's former head of security, has filed a whistleblower lawsuit alleging that Facebook deliberately failed to fix a bunch of security flaws, in violation of its 2019 settlement agreement with the Federal Trade Commission. The lawsuit, alleging violations of the whistleblower...
DORA Compliance in the Cloud Era: Insights from Deloitte and Wiz
How to address DORA compliance challenges with Wiz and Deloitte...
CVE-2025-58607
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GDPR Info Cookie Notice & Consent Banner for GDPR & CCPA Compliance cookie-notice-and-consent-banner allows Stored XSS.This issue affects Cookie Notice & Consent Banner for GDPR & CCPA Compliance:...
net/sched: act_mirred: don't override retval if we already lost the skb
...
net/sched: act_mirred: use the backlog for mirred ingress
...
CVE-2025-58607
CVE-2025-58607 is a stored XSS in the WordPress plugin “Cookie Notice & Consent Banner for GDPR & CCPA Compliance” (versions
“No place in our networks”: FCC hangs up on thousands of voice operators in robocall war
Everyone hates robocalls. However, it's difficult to track down all the scammers and spammers that make them, so the Federal Communications Commission FCC has taken another approach: it just disconnected over a thousand voice operators from the public telephone network for not doing their part to...
Google Android Memory Misreference Vulnerability (CNVD-2025-19920)
Google Android is a Linux-based open source operating system from Google. Google Android suffers from a memory misreference vulnerability that originates from a mix-up in avctlcbact.cc in the avctlcbmsgind instruction responsible for freeing memory, which can be exploited by an attacker to elevat...
U.K. Government Drops Apple Encryption Backdoor Order After U.S. Civil Liberties Pushback
The U.K. government has apparently abandoned its plans to force Apple to weaken encryption protections and include a backdoor that would have enabled access to the protected data of U.S. citizens. U.S. Director of National Intelligence DNI Tulsi Gabbard, in a statement posted on X, said the U.S...
CVE-2025-7734
An issue has been discovered in GitLab CE/EE affecting all versions from 14.2 before 18.0.6, 18.1 before 18.1.4 and 18.2 before 18.2.2 that, under certain conditions, could have allowed a successful attacker to execute actions on behalf of users by injecting malicious content...
