Security Bulletin: IBM Common Licensing using IBM® SDK, Java™ Technology Edition vulnerable to CVEs

Summary Multiple vulnerabilities affect IBM® SDK, Java™ Technology Edition in IBM License Key Server Administration and Reporting Tool ART and Administration Agent. This bulletin for IBM SDK, Java Technology Edition covers all applicable Java SE CVEs published by Oracle as part of their July 2025...

PT-2025-35771

Name of the Vulnerable Software and Affected Versions: LTL Freight Quotes – Daylight Edition versions through 2.2.7 Description: A deserialization of untrusted data issue exists in enituretechnology LTL Freight Quotes – Daylight Edition, allowing object injection. Recommendations: Update LTL...

PT-2025-35341

Name of the Vulnerable Software and Affected Versions SUNNET Corporate Training Management System versions prior to 10.11 Description A SQL injection flaw exists in SUNNET Corporate Training Management System. This issue allows remote attackers to execute arbitrary SQL commands. Recommendations...

U.S. Treasury Sanctions DPRK IT-Worker Scheme, Exposing $600K Crypto Transfers and $1M+ Profits

The U.S. Department of the Treasury's Office of Foreign Assets Control OFAC announced a fresh round of sanctions against two individuals and two entities for their role in the North Korean remote information technology IT worker scheme to generate illicit revenue for the regime's weapons of mass...

Linux Distros Unpatched Vulnerability : CVE-2017-17821

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WTF/wtf/FastBitVector.h in WebKit, as distributed in Safari Technology Preview Release 46, allows remote attackers to cause a denial of service buffer overflow ...

The vulnerability of the mtd component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the mtd component in the Linux operating system is related to improper initialization of the resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

ShengQiao Technology St. Joe ERP System 安全漏洞

ShengQiao Technology St. Joe ERP System is an enterprise management software from ShengQiao Technology China. A security vulnerability exists in ShengQiao Technology St. Joe ERP System that stems from insufficient input cleanup and could lead to a SQL injection attack...

PT-2025-34748

Name of the Vulnerable Software and Affected Versions: Delta Electronics COMMGR affected versions not specified Description: Delta Electronics COMMGR is susceptible to a stack-based buffer overflow. This issue poses a remote code execution RCE risk on Operational Technology OT systems. The...

Phishing Campaign Uses UpCrypter in Fake Voicemail Emails to Deliver RAT Payloads

Cybersecurity researchers have flagged a new phishing campaign that's using fake voicemails and purchase orders to deliver a malware loader called UpCrypter. The campaign leverages "carefully crafted emails to deliver malicious URLs linked to convincing phishing pages," Fortinet FortiGuard Labs...

Top EdTech Apps Delivering AI Skills

“AI isn’t coming, it’s already here. The question is, are you ready?” That’s the brutal reality of a…...

CVE-2025-54301

creationtimestamp| type| source ---|---|--- 2025-08-25 07:28:14+00:00| seen| https://bsky.app/profile/jensen.technology/post/3lx7hzswdmo2g 2025-08-25 08:44:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lx7mbkte7t2t...

$AutoGuardX$: a Comprehensive Cybersecurity Framework for Connected Vehicles

The rapid integration of Internet of Things IoT and interconnected systems in modern vehicles not only introduced a new era of convenience, automation, and connected vehicles but also elevated their exposure to sophisticated cyber threats. This is especially evident in US and Canada, where...

[SECURITY] Fedora 41 Update: toolbox-0.2-1.fc41

Toolbx is a tool for Linux, which allows the use of interactive command line environments for software development and troubleshooting the host operating system, without having to install software on the host. It is built on top of Podman and other standard container technologies from OCI. Toolbx...

US Government Seeks Medical Records of Trans Youth

Plus: Google wants billions of Chrome users to install an emergency fix, Kristi Noem is on the move, and North Korean IT workers are everywhere...

Chinese Hackers Murky, Genesis, and Glacial Panda Escalate Cloud and Telecom Espionage

Cybersecurity researchers are calling attention to malicious activity orchestrated by a China-nexus cyber espionage group known as Murky Panda that involves abusing trusted relationships in the cloud to breach enterprise networks. "The adversary has also shown considerable ability to quickly...

The vulnerability of the NTFS file system in Windows operating systems allows attackers to disclose protected information.

The vulnerability of the NTFS file system in Windows operating systems is related to synchronization errors when using a shared resource “Race Situation”. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by the system’s security measures...

SUSE CVE-2025-26403

Out-of-bounds write in the memory subsystem for some IntelR XeonR 6 processors when using IntelR SGX or IntelR TDX may allow a privileged user to potentially enable escalation of privilege via local access...

From Impact to Action: Turning BIA Insights Into Resilient Recovery

Modern businesses face a rapidly evolving and expanding threat landscape, but what does this mean for your business? It means a growing number of risks, along with an increase in their frequency, variety, complexity, severity, and potential business impact. The real question is, "How do you tackl...

AOMEI Cyber Backup 访问控制错误漏洞

AOMEI Cyber Backup is a backup and restore software from China-based AOMEI Technology AOMEI. An access control error vulnerability exists in AOMEI Cyber Backup that stems from a lack of authentication for critical functions, which could lead to remote code execution...

Intel 800 Series Ethernet Integer Overflow Vulnerability (CNVD-2025-19829)

Intel 800 Series Ethernet is a new generation of high-speed Ethernet technology from Intel that supports 25GbE and 100GbE speeds and is backward compatible with 10GbE. Intel 800 Series Ethernet suffers from an integer overflow vulnerability that originates from an integer overflow or wrap-around...