Bidirectional TLS Handshake Caching for Constrained Industrial IoT Scenarios

While TLS has become the de-facto standard for end-to-end security, its use to secure critical communication in evolving industrial IoT scenarios is severely limited by prevalent resource constraints of devices and networks. Most notably, the TLS handshake to establish secure connections incurs...

kernel: cifs: potential buffer overflow in handling symlinks

A buffer overflow vulnerability has been identified in the Linux kernel's Common Internet File System CIFS module, specifically within the parsemfsymlink function. This flaw is caused by insufficient input validation on the linklen value, which dictates the length of a symbolic link. An attacker...

CVE-2025-48499

Out-of-bounds write vulnerability exists in FUJIFILM Business Innovation MFPs. A specially crafted IPP Internet Printing Protocol or LPD Line Printer Daemon packet may cause a denial-of-service DoS condition on an affected MFP. Resetting the MFP is required to recover from the denial-of-service D...

CVE-2025-48499

CVE-2025-48499 is an out-of-bounds write vulnerability in FUJIFILM Business Innovation MFPs. A specially crafted IPP or LPD packet can cause a denial-of-service (DoS) on affected devices; recovery requires an MFP reset. Several connected sources confirm the issue and, in at least one entry, advis...

CVE-2025-48499

Out-of-bounds write vulnerability exists in FUJIFILM Business Innovation MFPs. A specially crafted IPP Internet Printing Protocol or LPD Line Printer Daemon packet may cause a denial-of-service DoS condition on an affected MFP. Resetting the MFP is required to recover from the denial-of-service D...

Whispering Agents: an Event-Driven Covert Communication Protocol for the Internet of Agents

The emergence of the Internet of Agents IoA introduces critical challenges for communication privacy in sensitive, high-stakes domains. While standard Agent-to-Agent A2A protocols secure message content, they are not designed to protect the act of communication itself, leaving agents vulnerable t...

Fujifilm DocuPrint CP225w 缓冲区错误漏洞

The Fujifilm DocuPrint CP225w is a printer from Fujifilm Japan. A buffer error vulnerability exists in the Fujifilm DocuPrint CP225w, which originates from a specially crafted IPP or LPD packet that results in an out-of-bounds write, potentially leading to a denial of service...

PT-2025-31797 · Fujifilm · Fujifilm Business Innovation Mfps

Name of the Vulnerable Software and Affected Versions: FUJIFILM Business Innovation MFPs affected versions not specified Description: An out-of-bounds write issue exists in FUJIFILM Business Innovation MFPs. Sending a specially crafted Internet Printing Protocol IPP or Line Printer Daemon LPD...

Leveraging Machine Learning for Botnet Attack Detection in Edge-Computing Assisted IoT Networks

The increase of IoT devices, driven by advancements in hardware technologies, has led to widespread deployment in large-scale networks that process massive amounts of data daily. However, the reliance on Edge Computing to manage these devices has introduced significant security vulnerabilities, a...

CVE-2013-10046 Agnitum Outpost Internet Security Local Privilege Escalation

A local privilege escalation vulnerability exists in Agnitum Outpost Internet Security 8.1 that allows an unprivileged user to execute arbitrary code with SYSTEM privileges. The flaw resides in the acs.exe component, which exposes a named pipe that accepts unauthenticated commands. By exploiting ...

CLSA-2025-1754037789 Fix of 5 CVEs

Focal update: v5.4.291 upstream stable release LP: 2106002 // CVE-2025-21760 // CVE-url: https://ubuntu.com/security/CVE-2025-21760 - ndisc: extend RCU protection in ndiscsendskb Focal update: v5.4.291 upstream stable release LP: 2106002 // CVE-2025-21761 // CVE-url:...

redis: Redis Unauthenticated Denial of Service

A flaw was found in Redis. Unauthenticated connections can trigger repeated IP protocol errors, leading to client starvation and an application-level denial of service. This flaw allows an attacker to induce this condition without authentication. This issue results in a denial of service conditio...

Agnitum Outpost Internet Security 安全漏洞

Agnitum Outpost Internet Security is an Internet security suite from the Russian company Agnitum. A security vulnerability exists in Agnitum Outpost Internet Security version 8.1, which stems from a directory traversal issue in the acs.exe component that could lead to the execution of arbitrary...

CVE-2025-51383

D-LINK DI-8200 16.07.26A1 is vulnerable to Buffer Overflow in the ipsecroadasp function via the hostip parameter...

Frozen in transit: Secret Blizzard’s AiTM campaign against diplomats

Microsoft Threat Intelligence has uncovered a cyberespionage campaign by the Russian state actor we track as Secret Blizzard that has been targeting embassies located in Moscow using an adversary-in-the-middle AiTM position to deploy their custom ApolloShadow malware. ApolloShadow has the...

CVE-2025-25691

creationtimestamp| type| source ---|---|--- 2025-07-30 20:51:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv7isqjuo52e 2026-07-06 06:03:10+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpxg5ptbi52i...

Age Verification Laws Send VPN Use Soaring—and Threaten the Open Internet

A law requiring UK internet users to verify their age to access adult content has led to a huge surge in VPN downloads—and has experts worried about the future of free expression online...

Optimal Planning for Enhancing the Resilience of Modern Distribution Systems against Cyberattacks

The increasing integration of IoT-connected devices in smart grids has introduced new vulnerabilities at the distribution level. Of particular concern is the potential for cyberattacks that exploit high-wattage IoT devices, such as EV chargers, to manipulate local demand and destabilize the grid...

Privacy-Preserving Anonymization of System and Network Event Logs Using Salt-Based Hashing and Temporal Noise

System and network event logs are essential for security analytics, threat detection, and operational monitoring. However, these logs often contain Personally Identifiable Information PII, raising significant privacy concerns when shared or analyzed. A key challenge in log anonymization is...

redis: Redis Unauthenticated Denial of Service

A flaw was found in Redis. Unauthenticated connections can trigger repeated IP protocol errors, leading to client starvation and an application-level denial of service. This flaw allows an attacker to induce this condition without authentication. This issue results in a denial of service conditio...