CVE-2025-15322

Tanium addressed an improper access controls vulnerability in Tanium Server...

EUVD-2025-206574

Tanium addressed an improper access controls vulnerability in Tanium Server...

PT-2026-5373

Name of the Vulnerable Software and Affected Versions Tanium Server affected versions not specified Description Tanium Server is subject to an improper access controls issue. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...

No More, No Less: Least-Privilege Language Models

Least privilege is a core security principle: grant each request only the minimum access needed to achieve its goal. Deployed language models almost never follow it, instead being exposed through a single API endpoint that serves all users and requests. This gap exists not because least privilege...

CVE-2025-26385: Improper Neutralization of Special Elements used in a Command

Johnson Controls Metasys component listed below have Improper Neutralization of Special Elements used in a Command Command Injection Vulnerability . Successful exploitation of this vulnerability could allow remote SQL execution This issue affects Metasys: Application and Data Server ADS installed...

CVE-2025-15322: Incorrect Authorization

Tanium addressed an improper access controls vulnerability in Tanium Server...

CVE-2025-15288

Tanium addressed an improper access controls vulnerability in Interact...

CVE-2025-15288

Tanium addressed an improper access controls vulnerability in Interact...

CVE-2025-69604

An issue in Shirt Pocket's SuperDuper! 3.11 and earlier allow a local attacker to modify the default task template to install an arbitrary package that can run shell scripts with root privileges and Full Disk Access, thus bypassing macOS privacy controls...

CVE-2025-69604

An issue in Shirt Pocket's SuperDuper! 3.11 and earlier allow a local attacker to modify the default task template to install an arbitrary package that can run shell scripts with root privileges and Full Disk Access, thus bypassing macOS privacy controls...

CVE-2025-15288

CVE-2025-15288 concerns Tanium Interact with an improper access controls vulnerability. Affected product: Tanium Interact (component). Root cause: improper access controls described in multiple sources linked to the CVE entry. Public data show a low to medium overall impact per CVSS vectors (CON/...

CVE-2025-15288

Tanium addressed an improper access controls vulnerability in Interact...

EUVD-2025-206517

Tanium addressed an improper access controls vulnerability in Interact...

CVE-2025-15288 Tanium addressed an improper access controls vulnerability in Interact.

Tanium addressed an improper access controls vulnerability in Interact...

CVE-2025-15288 Tanium addressed an improper access controls vulnerability in Interact.

Tanium addressed an improper access controls vulnerability in Interact...

Common Cloud Migration Security Mistakes (and How to Avoid Them)

Common cloud migration security mistakes explained, from weak access controls to misconfigurations, plus practical steps organisations can take to avoid risk...

Incorrect Regular Expression

Hono is vulnerable to Incorrect Regular Expression. The vulnerability is due to improper validation of IPv4 octet ranges in the IP Restriction Middleware, which allows an attacker to craft malformed IP addresses to bypass IP-based access controls...

ThreatsDay Bulletin: New RCEs, Darknet Busts, Kernel Bugs & 25+ More Stories

This week's updates show how small changes can create real problems. Not loud incidents, but quiet shifts that are easy to miss until they add up. The kind that affects systems people rely on every day. Many of the stories point to the same trend: familiar tools being used in unexpected ways...

libsoup: libsoup: Duplicate Host Header Handling Causes Host-Parsing Discrepancy (First- vs Last-Value Wins)

A flaw in libsoup’s HTTP header handling allows multiple Host: headers in a request and returns the last occurrence for server-side processing. Common front proxies often honor the first Host: header, so this mismatch can cause vhost confusion where a proxy routes a request to one backend but the...

libsoup: libsoup: Duplicate Host Header Handling Causes Host-Parsing Discrepancy (First- vs Last-Value Wins)

A flaw in libsoup’s HTTP header handling allows multiple Host: headers in a request and returns the last occurrence for server-side processing. Common front proxies often honor the first Host: header, so this mismatch can cause vhost confusion where a proxy routes a request to one backend but the...