13237 matches found
Salt Typhoon APT Targets Global Telecom and Energy Sectors, Says Darktrace
The China-linked Salt Typhoon APT group attacked a European telecom via a Citrix NetScaler vulnerability in July 2025, Darktrace reports. This follows past US Army and telecom breaches...
Multi-Factor Authentication in Spring Security 7
In 2013, it was proposed to add multi-factor authentication into Spring Security. That was the year that “selfie” was added to the English dictionary and “What Does the Fox Say?” was a viral YouTube hit. Needless to say, one of the biggest features in Spring Security 7 is a long time coming, and ...
Major AWS Outage Now Mitigated: Global Impact and What Happened
A global AWS outage disrupted major apps and services across regions before being fully mitigated, exposing heavy dependence on cloud infrastructure...
CVE-2025-62644
The Restaurant Brands International RBI assistant platform through 2025-09-06 has a Global Store Directory that shares personal information among authenticated users...
Malicious Package
Overview @global-engineering-shared/gweb-material-global is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...
MediaWiki GlobalBlocking Extension security vulnerability
Mediawiki GlobalBlocking Extension is an extension of the Wikimedia Foundation USA. A security vulnerability exists in Mediawiki GlobalBlocking Extension versions 1.43 and 1.44, which stems from improper input neutralization and could lead to a stored cross-site scripting attack...
Dell Wireless 5932e Wireless Mobile Modem Quotation Mark Code Execution
The vulnerability of the microprogramming software of the Dell Wireless 5932e wireless mobile modem, the embedded Qualcomm Snapdragon X62 chip, and the GNSS/GPS driver is related to the absence of quotation marks in the names of elements or search paths. Exploiting this vulnerability can allow a...
OSV-2025-845 Global-buffer-overflow in icaltime_day_of_year
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=452914686 Crash type: Global-buffer-overflow READ 4 Crash state: icaltimedayofyear expandyeardays iteratorsetstart...
PT-2025-46092
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=452914686 Crash type: Global-buffer-overflow READ 4 Crash state: icaltime day of year expand year days iterator set start...
[slackware-security] stunnel
New stunnel packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/stunnel-5.76-i586-1slack15.0.txz: Upgraded. Service-level multivalued options now override rather than append to global defaults,...
CVE-2025-62644
The Restaurant Brands International RBI assistant platform through 2025-09-06 has a Global Store Directory that shares personal information among authenticated users...
CVE-2025-62644
The Restaurant Brands International RBI assistant platform through 2025-09-06 has a Global Store Directory that shares personal information among authenticated users...
libical:libical_extended_fuzzer: Global-buffer-overflow in icaltime_day_of_year
Project: https://github.com/libical/libical.git Detailed Report: https://oss-fuzz.com/testcase?key=6602960185655296 Project: libical Fuzzing Engine: afl Fuzz Target: libicalextendedfuzzer Job Type: aflasanlibical Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address:...
Under the engineering hood: Why Malwarebytes chose WordPress as its CMS
It might surprise some that a security company would choose WordPress as the backbone of its digital content operations. After all, WordPress is often associated with open-source plugins, community themes, and a wide range of deployment practices—some stronger than others. But that perception...
PT-2025-42657
Name of the Vulnerable Software and Affected Versions Restaurant Brands International RBI assistant platform versions through 2025-09-06 Description The Restaurant Brands International RBI assistant platform’s Global Store Directory shares personal information among authenticated users...
WordPress SureForms plugin information disclosure vulnerability
WordPress SureForms plugin is a visual form builder plugin designed for WordPress , support drag and drop operation , no programming foundation to quickly build responsive forms . An information disclosure vulnerability exists in the WordPress SureForms plugin, which stems from improper access...
C/N0 Analysis-Based GPS Spoofing Detection with Variable Antenna Orientations
GPS spoofing poses a growing threat to aviation by falsifying satellite signals and misleading aircraft navigation systems. This paper demonstrates a proof-of-concept spoofing detection strategy based on analyzing satellite Carrier-to-Noise Density Ratio C/N$0$ variation during controlled static...
CVE-2025-62644
The Restaurant Brands International RBI assistant platform through 2025-09-06 has a Global Store Directory that shares personal information among authenticated users...
Restaurant Brands International assistant platform security vulnerability
Restaurant Brands International assistant platform is a restaurant back office platform from Restaurant Brands International. A security vulnerability exists in Restaurant Brands International assistant platform version 2025-09-06 and earlier, which stems from the global store catalog sharing...
