18340 matches found
CVE-2025-39436
creationtimestamp| type| source ---|---|--- 2025-04-17 16:48:48+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114354325261385044 2025-04-17 18:24:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmzq3clqkt2v 2025-04-20 05:00:06+00:00| published-proof-of-concept...
Microsoft’s Secure by Design journey: One year of success
Cybersecurity is one of the top risks facing businesses. Organizations are struggling to navigate the ever-evolving cyberthreat landscape in which 600 million identity attacks are carried out daily.1 The median time for a cyberattacker to access private data from phishing is 1 hour and 12 minutes...
CVE-2025-32605 WordPress MemberPress Discord Addon Plugin <= 1.1.1 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in expresstechsoftware MemberPress Discord Addon expresstechsoftwares-memberpress-discord-add-on allows Reflected XSS.This issue affects MemberPress Discord Addon: from n/a through = 1.1.1...
CVE-2021-47670
In the Linux kernel, the following vulnerability has been resolved: can: peakusb: fix use after free bugs After calling peakusbnetifrxniskb, dereferencing skb is unsafe. Especially, the canframe cf which aliases skb memory is accessed after the peakusbnetifrxni. Reordering the lines solves the...
‘Stupid and Dangerous’: CISA Funding Chaos Threatens Essential Cybersecurity Program
The CVE Program is the primary way software vulnerabilities are tracked. Its long-term future remains in limbo even after a last-minute renewal of the US government contract that funds it...
CVE-2025-32870
creationtimestamp| type| source ---|---|--- 2025-04-16 18:44:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmxaptals42v 2025-04-16 20:48:39+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114349606118111826 2025-04-16 21:54:57+00:00| seen|...
CVE Program Almost Unfunded
Mitre's CVE's program--which provides common naming and other informational resources about cybersecurity vulnerabilities--was about to be cancelled, as the US Department of Homeland Security failed to renew the contact. It was funded for eleven more months at the last minute. This is a big deal...
Cyber Signals Issue 9 | AI-powered deception: Emerging fraud threats and countermeasures
Introduction | Security snapshot | Threat briefing Defending against attacks | Expert profile Microsoft maintains a continuous effort to protect its platforms and customers from fraud and abuse. From blocking imposters on Microsoft Azure and adding anti-scam features to Microsoft Edge, to fightin...
New BPFDoor Controller Enables Stealthy Lateral Movement in Linux Server Attacks
Cybersecurity researchers have unearthed a new controller component associated with a known backdoor called BPFDoor as part of cyber attacks targeting telecommunications, finance, and retail sectors in South Korea, Hong Kong, Myanmar, Malaysia, and Egypt in 2024. "The controller could open a...
Safeguarding Vulnerability Management Despite MITRE Funding Risks
Recently, there have been several developments from vulnerability databases that have led to some concerns around their continued effectiveness in categorizing and enriching the data about vulnerabilities. The MITRE CVE program has been an essential part of cybersecurity for over 25 years. It...
U.S. Govt. Funding for MITRE's CVE Ends April 16, Cybersecurity Community on Alert
The U.S. government funding for non-profit research giant MITRE to operate and maintain its Common Vulnerabilities and Exposures CVE program will expire Wednesday, an unprecedented development that could shake up one of the foundational pillars of the global cybersecurity ecosystem. The 25-year-o...
Funding Expires for Key Cyber Vulnerability Database
A critical resource that cybersecurity professionals worldwide rely on to identify, mitigate and fix security vulnerabilities in software and hardware is in danger of breaking down. The federally funded, non-profit research and development organization MITRE warned today that its contract to...
The Digital Cybersecurity Expert: How Far Have We Come?
The increasing deployment of large language models LLMs in the cybersecurity domain underscores the need for effective model selection and evaluation. However, traditional evaluation methods often overlook specific cybersecurity knowledge gaps that contribute to performance limitations. To addres...
CrazyHunter Campaign Targets Taiwanese Critical Sectors
This blog entry details research on emerging ransomware group CrazyHunter, which has launched a sophisticated campaign aimed at Taiwan's essential services...
Closing the Security Gap From Threat Hunting to Detection Engineering
Closing the Security Gap From Threat Hunting to Detection Engineering By Ilya Kolmanovich, Alejandro Houspanossian, Joe Malenfant and Tomer Shloman · April 16, 2025 In today's rapidly evolving AI-fueled threat landscape, every organization is trying to stop threats as early as possible. Threat...
Naming Is Framing: How Cybersecurity'S Language Problems Are Repeating in AI Governance
Language is not neutral; it frames understanding, structures power, and shapes governance. This paper argues that misnomers like cybersecurity and artificial intelligence AI are more than semantic quirks; they carry significant governance risks by obscuring human agency, inflating expectations, a...
CVE-2025-30732
...
CVE-2025-30731
CVE-2025-30731 affects Oracle E-Business Suite, Oracle Applications Technology Stack (Configuration) in versions 12.2.3–12.2.14. An unauthenticated attacker with logon to the infrastructure can compromise the stack; successful attacks involve human interaction and may allow unauthorized updates/i...
CVE-2025-30713
Vulnerability CVE-2025-30713 affects Oracle PeopleSoft Enterprise HCM Talent Acquisition Manager (TA Manager) version 9.2, specifically the Job Opening component. A low-privileged attacker can exploit over HTTP with user interaction to gain unauthorized update/insert/delete and read access to TA ...
