145654 matches found
GodDamn Ransomware Uses PoisonX Driver to Disable Endpoint Defenses
Cybersecurity researchers have flagged a new ransomware family called GodDamn that employs the PoisonX kernel driver to neutralize security software as part of its defense evasion strategy. According to a new report published by the Threat Hunter Team from Symantec, the ransomware was first...
CLEANSTART-2026-FY61868 Security fixes for CVE-2026-25679, CVE-2026-27140, CVE-2026-32280, CVE-2026-32281, CVE-2026-32283, CVE-2026-32289 applied in versions: 1.13.2-r0, 1.13.2-r1
Multiple security vulnerabilities affect the velero-plugin-for-microsoft-azure-fips package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-SC97100 Security fixes for CVE-2026-25679, CVE-2026-27140, CVE-2026-32280, CVE-2026-32281, CVE-2026-32283, CVE-2026-32289 applied in versions: 1.13.1-r1, 1.13.2-r0, 1.13.2-r1
Multiple security vulnerabilities affect the velero-plugin-for-microsoft-azure-fips package. These issues are resolved in later releases. See references for individual vulnerability details...
libXfont2 PCF Font Parsing Heap Buffer Overflow
...
libXfont2 computeProps Property Buffer Heap Buffer Overflow
...
libXfont2 BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow
...
EUVD-2026-42401
Improper access control in Microsoft Edge Chromium-based allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-58525 Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
...
CVE-2026-58525
CVE-2026-58525 affects Microsoft Edge (Chromium-based) with an improper access control that lets an unauthenticated attacker bypass a security feature over the network. CVSS 3.1 base score 8.2 (HIGH) with Network attack vector, Low attack complexity, No privileges, User interaction required, Conf...
GHSA-HFRJ-R4V7-3997 vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-aws, linux-azure, linux-qemu-melange, linux-gcp, linux-qemu...
GHSA-5Q2P-7748-G6QP vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-aws, linux-azure, linux-qemu-melange, linux-gcp, linux-qemu...
GHSA-3J78-PF43-6MVQ vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-aws, linux-azure, linux-qemu-melange, linux-gcp, linux-qemu...
CVE-2026-53212 vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-aws, linux-azure, linux-qemu-melange, linux-gcp, linux-qemu...
GHSA-7Q5M-QV9W-C8XX vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-aws, linux-azure, linux-qemu-melange, linux-gcp, linux-qemu...
GHSA-JPVF-6235-4RH8 vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-aws, linux-azure, linux-qemu-melange, linux-gcp, linux-qemu...
GHSA-FJ73-9FR6-G7MW vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-aws, linux-azure, linux-qemu-melange, linux-gcp, linux-qemu...
GHSA-5R3H-V82J-R7RR vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-aws, linux-azure, linux-qemu-melange, linux-gcp, linux-qemu...
CVE-2026-53218 vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-aws, linux-azure, linux-qemu-melange, linux-gcp, linux-qemu...
Microsoft Exchange Server SSRF Vulnerability
This vulnerability is part of an attack chain that could allow remote code execution on Microsoft Exchange Server. The initial attack requires the ability to make an untrusted connection to Exchange server port 443. Other portions of the chain can be triggered if an attacker already has access or...
DEBULL Tooling Abuses Microsoft Device-Code Flow to Target M365 Accounts
A Microsoft 365 device code phishing campaign has been observed leveraging collaboration-themed lures to take control of victim accounts between the last week of June 2026 and into early July, per findings from ZeroBEC. "The campaign did not depend on a fake Microsoft password page. It used a...