CVE-2025-50867

creationtimestamp| type| source ---|---|--- 2025-07-26 21:00:04+00:00| published-proof-of-concept| Telegram/wjhbCWP6S6MT1dR4loC7XHcYLFuNifCaXxewWhJr2ZOKhYQ 2025-07-28 21:00:05+00:00| published-proof-of-concept| Telegram/yClP7ID2sv33ZU8LKP82OuDHMHI-3r8bUmurim2SHQMJTmY 2025-07-31 19:57:13+00:00|...

MAL-2025-6262 Malicious code in blank-pkg (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e2f49c661af4e850b4d2aa252c5bdfc2d7409efbbae9396ac2901d0e9fc0f910 The OpenSSF Package Analysis project identified 'blank-pkg' @ 10.0.1...

CVE-2025-54412

creationtimestamp| type| source ---|---|--- 2025-07-25 16:58:06+00:00| published-proof-of-concept| https://github.com/skops-dev/skops/security/advisories/GHSA-m7f4-hrc6-fwg3 2025-07-27 02:27:52+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3luvzpzsgxn2k...

CVE-2025-38457

CVE-2025-38457 concerns a Linux kernel net/sched bug where grafting a qdisc to a non-existent parent class could cause a failure during qdisc initialization. The fix introduces early validation via qdisc_leaf so that attempting to attach to a non-class parent aborts before qdisc_create. Affected ...

CVE-2025-38457

In the Linux kernel, the following vulnerability has been resolved: net/sched: Abort tcmodifyqdisc if parent class does not exist Lion's patch 1 revealed an ancient bug in the qdisc API. Whenever a user creates/modifies a qdisc specifying as a parent another qdisc, the qdisc API will, during...

CVE-2025-38407

creationtimestamp| type| source ---|---|--- 2025-07-25 13:50:07+00:00| seen| https://bsky.app/profile/potato.software/post/3lus6w5lgwb2u...

CVE-2025-38362 drm/amd/display: Add null pointer check for get_first_active_display()

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null pointer check for getfirstactivedisplay The function modhdcphdcp1enableencryption calls the function getfirstactivedisplay, but does not check its return value. The return value is a null pointer if the...

xonPlus Launches Real-Time Breach Alerting Platform for Enterprise Credential Exposure

Chennai, India, 25th July 2025, CyberNewsWire...

ToolShell: a story of five vulnerabilities in Microsoft SharePoint

On July 19–20, 2025, various security companies and national CERTs published alerts about active exploitation of on-premise SharePoint servers. According to the reports, observed attacks did not require authentication, allowed attackers to gain full control over the infected servers, and were...

MAL-2025-6242 Malicious code in dexa56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f43715f87a1218ff23eb2b375c7b84ac74b6e17a9035aeb9ea4c0657546b4484 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6244 Malicious code in jet-os-detection (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae12c732362620c804ce4ff9fc2e85cd4f861a8084f6b9016fe67ce31b57c955 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jet-os-detection (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae12c732362620c804ce4ff9fc2e85cd4f861a8084f6b9016fe67ce31b57c955 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Enhancing IoT Intrusion Detection Systems through Adversarial Training

The augmentation of Internet of Things IoT devices transformed both automation and connectivity but revealed major security vulnerabilities in networks. We address these challenges by designing a robust intrusion detection system IDS to detect complex attacks by learning patterns from the...

CVE-2025-50128

creationtimestamp| type| source ---|---|--- 2025-07-24 15:30:17+00:00| seen| https://infosec.place/objects/333685a9-60c1-49f8-bf8f-d77381bb539f...

AI-generated image watermarks can be easily removed, say researchers

Now that AI can make fake images that look real, how can we know what's legitimate and what isn't? One of the primary ways has been the use of defensive watermarking, which means embedding invisible markers in AI-generated images to show they were made up. Now, researchers have broken that...

Information Security Based on LLM Approaches: a Review

Information security is facing increasingly severe challenges, and traditional protection means are difficult to cope with complex and changing threats. In recent years, as an emerging intelligent technology, large language models LLMs have shown a broad application prospect in the field of...

Debian: Security Advisory (DLA-4248-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Unmasking Synthetic Realities in Generative AI: a Comprehensive Review of Adversarially Robust Deepfake Detection Systems

The rapid advancement of Generative Artificial Intelligence has fueled deepfake proliferation-synthetic media encompassing fully generated content and subtly edited authentic material-posing challenges to digital security, misinformation mitigation, and identity preservation. This systematic revi...

Secure One-Sided Device-Independent Quantum Key Distribution under Collective Attacks with Enhanced Robustness

We study the security of a quantum key distribution QKD protocol under the one-sided device-independent 1sDI setting, which assumes trust in only one party's measurement device. This approach effectively provides a balance between the experimental viability of device-dependent DD-QKD and the...

Regression-Aware Continual Learning for Android Malware Detection

Malware evolves rapidly, forcing machine learning ML-based detectors to adapt continuously. With antivirus vendors processing hundreds of thousands of new samples daily, datasets can grow to billions of examples, making full retraining impractical. Continual learning CL has emerged as a scalable...