8594 matches found
CVE-2025-30387 Document Intelligence Studio On-Prem Elevation of Privilege Vulnerability
...
CVE-2025-30387
CVE-2025-30387 is a path traversal and elevation-of-privilege vulnerability affecting Microsoft Azure’s Document Intelligence Studio On-Prem implementation. The initial description identifies an improper limitation of a pathname to a restricted directory, enabling an unauthenticated or network-ba...
Zoom Workplace Cross-Site Scripting Vulnerability
Zoom Workplace is an AI-first collaboration platform from Zoom that integrates core features such as team communication, meetings, document collaboration, and a built-in AI Companion smart assistant to boost productivity. Zoom Workplace suffers from a cross-site scripting vulnerability that can b...
SAP Business Objects Business Intelligence Platform 安全漏洞
SAP Business Objects Business Intelligence Platform is a suite of business intelligence software and enterprise performance solutions from SAP, Germany. The product features report generation, analytics, and data visualization. An access control error vulnerability exists in SAP Business Objects...
Intel Xeon 6 Processor 安全漏洞
The Intel Xeon 6 Processor is a new generation of server processors from Intel aimed at data centers, artificial intelligence AI and high performance computing HPC. The Intel Xeon 6 Processor suffers from an elevation of privilege vulnerability that stems from insufficient control flow management...
Ivanti Neurons for ITSM 安全漏洞
Ivanti Neurons for ITSM is an automation platform for IT service management, based on artificial intelligence and machine learning technologies, designed to optimize the IT service delivery process and enhance user experience. An authentication bypass vulnerability exists in Ivanti Neurons for...
KLA83574 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Microsoft Azure File Sync can be exploited remotely to gain privileges. 2. An...
Towards AI-Driven Human-Machine Co-Teaming for Adaptive and Agile Cyber Security Operation Centers
Security Operations Centers SOCs face growing challenges in managing cybersecurity threats due to an overwhelming volume of alerts, a shortage of skilled analysts, and poorly integrated tools. Human-AI collaboration offers a promising path to augment the capabilities of SOC analysts while reducin...
Offensive Security for AI Systems: Concepts, Practices, and Applications
As artificial intelligence AI systems become increasingly adopted across sectors, the need for robust, proactive security strategies is paramount. Traditional defensive measures often fall short against the unique and evolving threats facing AI-driven technologies, making offensive security an...
Wordfence Intelligence Weekly WordPress Vulnerability Report (April 28, 2025 to May 4, 2025)
In case you missed it, Wordfence just published itsannual WordPress security report for 2024. Read it now to learn more about the evolving risk landscape of WordPress so you can keep your sites protected in 2025 and beyond. Last week, there were 84 vulnerabilities disclosed in 68 WordPress Plugin...
Passwords in the age of AI: We need to find alternatives
For decades, passwords have been our default method for keeping online accounts safe. But in the age of artificial intelligence, this traditional security method is facing challenges it was never built to withstand. A team at Cybernews conducted a study of over 19 billion newly exposed passwords...
CVE-2025-24977
OpenCTI is an open cyber threat intelligence CTI platform. Prior to version 6.4.11 any user with the capability manage customizations can execute commands on the underlying infrastructure where OpenCTI is hosted and can access internal server side secrets by misusing the web-hooks. Since the...
Guardians of the Web: the Evolution and Future of Website Information Security
Website information security has become a critical concern in the digital age. This article explores the evolution of website information security, examining its historical development, current practices, and future directions. The early beginnings from the 1960s to the 1980s laid the groundwork...
Tulsi Gabbard Reused the Same Weak Password on Multiple Accounts for Years
Now the US director of national intelligence, Gabbard failed to follow basic cybersecurity practices on several of her personal accounts, leaked records reviewed by WIRED reveal...
Elevating Cyber Threat Intelligence against Disinformation Campaigns with LLM-Based Concept Extraction and the FakeCTI Dataset
The swift spread of fake news and disinformation campaigns poses a significant threat to public trust, political stability, and cybersecurity. Traditional Cyber Threat Intelligence CTI approaches, which rely on low-level indicators such as domain names and social media handles, are easily evaded ...
CVE-2025-46571
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to version 0.6.6, low privileged users can upload HTML files which contain JavaScript code via the /api/v1/files/ backend endpoint. This endpoint returns a file id, which can be used to open t...
CVE-2025-24977
CVE-2025-24977 (OpenCTI) affects OpenCTI prior to version 6.4.11. The vulnerability arises because a user with the privilege to manage customizations can misuse web-hooks to execute commands on the underlying infrastructure and access internal server-side secrets, effectively allowing a root shel...
Towards Effective Identification of Attack Techniques in Cyber Threat Intelligence Reports Using Large Language Models
This work evaluates the performance of Cyber Threat Intelligence CTI extraction methods in identifying attack techniques from threat reports available on the web using the MITRE ATT&CK framework. We analyse four configurations utilising state-of-the-art tools, including the Threat Report ATT&CK...
Privacy Risks and Preservation Methods in Explainable Artificial Intelligence: a Scoping Review
Explainable Artificial Intelligence XAI has emerged as a pillar of Trustworthy AI and aims to bring transparency in complex models that are opaque by nature. Despite the benefits of incorporating explanations in models, an urgent need is found in addressing the privacy concerns of providing this...