14110 matches found
38,000+ FreeDrain Subdomains Found Exploiting SEO to Steal Crypto Wallet Seed Phrases
Cybersecurity researchers have exposed what they say is an "industrial-scale, global cryptocurrency phishing operation" engineered to steal digital assets from cryptocurrency wallets for several years. The campaign has been codenamed FreeDrain by threat intelligence firms SentinelOne and Validin...
RLSA-2024:2137 Low: LibRaw security update
LibRaw is a library for reading RAW files obtained from digital photo cameras CRW/CR2, NEF, RAF, DNG, and others. Security Fixes: LibRaw: a heap-buffer-overflow in raw2imageex CVE-2023-1729 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other...
Botan C++ Crypto Algorithms Library 3.8.0
Botan is a C++ library of cryptographic algorithms, including AES, DES, SHA-1, RSA, DSA, Diffie-Hellman, and many others. It also supports X.509 certificates and CRLs, and PKCS 10 certificate requests, and has a high level filter/pipe message processing system. The library is easily portable to...
Western Digital My Cloud Multiple Products 5.x < 5.31.101 Multiple Vulnerabilities (WDC-25003)
Multiple Western Digital My Cloud products are prone to multiple vulnerabilities in various third-party components Python3, Requests, WordPress. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective rig...
Redefining Application Security: Imperva’s Vision for the Future
It’s no secret that web applications have undergone a significant transformation over the past few years. The widespread adoption of containerization, serverless computing, low-code development, APIs, and microservices has redefined how applications are built, deployed, and scaled. According to...
PT-2025-19327 · Intel · Intel Uefi
Name of the Vulnerable Software and Affected Versions: Intel UEFI affected versions not specified Description: A vulnerability in the digital signature verification process does not properly validate variable attributes, which allows an attacker to bypass signature verification by creating a...
Antifragility of RIS-Assisted Communication Systems under Jamming Attacks
Antifragility of communication systems is defined as measure of benefits gained from the adverse events and variability of its environment. In this paper, we introduce the notion of antifragility in Reconfigurable Intelligent Surface RIS assisted communication systems affected by a jamming attack...
Privacy for Agentic AI
Sooner or later, it's going to happen. AI systems will start acting as agents, doing things on our behalf with some degree of autonomy. I think it's worth thinking about the security of that now, while its still a nascent idea. In 2019, I joined Inrupt, a company that is commercializing Tim...
CVE-2023-37535
Insufficient URI protocol whitelist in HCL Domino Volt and Domino Leap allow script injection through query parameters...
CVE-2024-12706
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in OpenText™ Digital Asset Management. T he vulnerability could allow an authenticated user to run arbitrary SQL commands on the underlying database. This issue affects Digital Asset Management.:...
UK Retail Giant Co-op Shuts Down IT Systems After Cyberattack Attempt
Retailer Acts Swiftly to Limit Threat as UK Retail Sector Faces Growing Digital Risks...
Customer Account Takeovers: The Multi-Billion Dollar Problem You Don't Know About
Everyone has cybersecurity stories involving family members. Here's a relatively common one. The conversation usually goes something like this: "The strangest thing happened to my streaming account. I got locked out of my account, so I had to change my password. When I logged back in, all my show...
[SECURITY] Fedora 40 Update: digikam-8.6.0-4.fc40
digiKam is an easy to use and powerful digital photo management application, which makes importing, organizing and manipulating digital photos a "snap". An easy to use interface is provided to connect to your digital camera, preview the images and download and/or delete them. digiKam built-in ima...
[SECURITY] Fedora 41 Update: digikam-8.6.0-4.fc41
digiKam is an easy to use and powerful digital photo management application, which makes importing, organizing and manipulating digital photos a "snap". An easy to use interface is provided to connect to your digital camera, preview the images and download and/or delete them. digiKam built-in ima...
The vulnerability of DRM/STI components in Linux kernel allows a perpetrator to trigger a service failure.
The vulnerability of DRM/STI components in Linux kernel relates to the assignment of the NULL pointer in the stigdpatomiccheck function. Exploiting this vulnerability can allow an attacker to trigger a service failure...
Security-By-Design at the Telco Edge with OSS: Challenges and Lessons Learned
This paper presents our experience, in the context of an industrial R&D project, on securing GENIO, a platform for edge computing on Passive Optical Network PON infrastructures, and based on Open-Source Software OSS. We identify threats and related mitigations through hardening, vulnerability...
The vulnerability of DRM/STI components in Linux kernel allows a perpetrator to trigger a service failure.
The vulnerability of DRM/STI components in Linux kernel relates to the assignment of the NULL pointer in the sticursoratomiccheck function. Exploiting this vulnerability can allow an attacker to trigger a service failure...
[SECURITY] Fedora 42 Update: digikam-8.6.0-4.fc42
digiKam is an easy to use and powerful digital photo management application, which makes importing, organizing and manipulating digital photos a "snap". An easy to use interface is provided to connect to your digital camera, preview the images and download and/or delete them. digiKam built-in ima...
Digital rampage saw ex-Disney employee remove nut allergy info from menus, dox co-workers, and more
A former Disney employee, Michael Scheuer, will serve three years in prison for computer fraud and aggravated identity theft after a digital sabotage campaign against his ex-employer. In addition to his sentence, he must pay nearly US$688,000 in restitution. Scheuer, a former menu production...