Debian: Security Advisory (DLA-4242-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-53909

mailcow: dockerized is an open source groupware/email suite based on docker. A Server-Side Template Injection SSTI vulnerability exists in versions prior to 2025-07 in the notification template system used by mailcow for sending quota and quarantine alerts. The template rendering engine allows...

CERT-UA Discovers LAMEHUG Malware Linked to APT28, Using LLM for Phishing Campaign

The Computer Emergency Response Team of Ukraine CERT-UA has disclosed details of a phishing campaign that's designed to deliver a malware codenamed LAMEHUG. "An obvious feature of LAMEHUG is the use of LLM large language model, used to generate commands based on their textual representation...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization via the DingDing alert integration. An attacker can access sensitive information by leveraging Viewer-level permissions to interact with the integration. Remediation Upgrade...

Detecting and Visualizing Lateral Movement Attacks with Trellix Helix Connect

Detecting and Visualizing Lateral Movement Attacks with Trellix Helix Connect By Maulik Maheta and Adithya Chandra · July 17, 2025 Executive summary This blog marks the third installment in our series on detecting and visualizing lateral movement attacks with Trellix Helix Connect. A lateral...

GHSA-MVR2-9PJ6-7W5J

creationtimestamp| type| source ---|---|--- 2025-07-16 03:17:48+00:00| seen| https://gist.github.com/safer-bot/f321679cb659096c5eb6a7cca02b46cc 2025-07-16 03:44:39+00:00| seen| https://gist.github.com/safer-bot/a2f85bb3abd40ab169cfae05635f3231 2025-07-16 04:20:43+00:00| seen|...

GHSA-7R82-7XV7-XCPJ

creationtimestamp| type| source ---|---|--- 2025-07-16 03:12:23+00:00| seen| https://gist.github.com/safer-bot/79174d0c201539d79b25fe0f667fa43e 2025-07-16 03:23:26+00:00| seen| https://gist.github.com/safer-bot/b741dde9ba07c0f12e52ef92e8b23ee0 2025-07-16 03:39:54+00:00| seen|...

GHSA-3VQJ-43W4-2Q58

creationtimestamp| type| source ---|---|--- 2025-07-16 03:12:23+00:00| seen| https://gist.github.com/safer-bot/79174d0c201539d79b25fe0f667fa43e 2025-07-16 03:39:54+00:00| seen| https://gist.github.com/safer-bot/2d5f96fb1f5118b0adf472cee7a0dff8 2025-07-16 04:37:01+00:00| seen|...

CGA-MHG4-342V-W7XQ

Bulletin has no description...

BELL-CVE-2025-38347

Bulletin has no description...

How To Automate Ticket Creation, Device Identification and Threat Triage With Tines

Run by the team at workflow orchestration and AI platform Tines, the Tines library features over 1,000 pre-built workflows shared by security practitioners from across the community - all free to import and deploy through the platform's Community Edition. A recent standout is a workflow that...

PT-2025-28420 · Undefined · Undefined

CVE-2025-53611 Rejected reason https://t.co/Ia4kurzLb4 Customizable Vulnerability Alerts: https://t.co/U7998fz7yk...

CVE-2025-20300 Improper Access Control Lets Low-Privilege Users Suppress Read-Only Alerts in Splunk Enterprise

In Splunk Enterprise versions below 9.4.2, 9.3.5, 9.2.6, and 9.1.9 and Splunk Cloud Platform versions below 9.3.2411.103, 9.3.2408.112, and 9.2.2406.119, a low-privileged user that does not hold the "admin" or "power" Splunk roles, and has read-only access to a specific alert, could suppress that...

Understand your software’s supply chain with GitHub’s dependency graph

What if you could spot the weakest link in your software supply chain before it breaks? With GitHub's dependency graph, you can. By providing a clear, complete view of the external packages your code depends on, both directly and indirectly, it allows you to understand, secure, and manage your...

CVE-2025-34055

creationtimestamp| type| source ---|---|--- 2025-07-01 15:08:07+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/20052...

CVE-2025-34065

creationtimestamp| type| source ---|---|--- 2025-07-01 15:08:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/20050...

CVE-2025-6940

creationtimestamp| type| source ---|---|--- 2025-07-01 03:10:30+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/20002...

GHSA-X97G-H2VP-G2C5

creationtimestamp| type| source ---|---|--- 2025-07-01 02:07:42+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19997...

Falco 0.41.3

Sysdig Falco is a behavioral activity monitoring agent that is open source and comes with native support for containers. Falco lets you define highly granular rules to check for activities involving file and network activity, process execution, IPC, and much more, using a flexible syntax. Falco...

CERTFR-2025-ACT-027

creationtimestamp| type| source ---|---|--- 2025-06-30 12:15:34+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3lst5y37vvg26 2025-06-30 12:15:35+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/114772261835133895...