MINI-573R-J2C4-MQ53

Bulletin has no description...

MINI-QFRC-FXR6-G8R8

Bulletin has no description...

Lightdash v0.1024.6 - Server-Side Request Forgery

Server-Side Request Forgery “SSRF” in the export dashboard functionality of Lightdash version 0.1024.6 allows remote authenticated threat actors to obtain the session cookie of any user who exports a crafted dashboard. When they are exported, dashboards containing HTML elements can trigger HTTP...

MINI-XFCJ-Q9WQ-722X

Bulletin has no description...

MINI-82C9-FCMQ-XF36

Bulletin has no description...

MINI-984W-X4W4-Q58G

Bulletin has no description...

MINI-7RRF-QXV7-HMCQ

Bulletin has no description...

MINI-CV5F-7GQR-69VW

Bulletin has no description...

MINI-HVP4-V9Q4-RWG6

Bulletin has no description...

MINI-X8R5-X48V-5887

Bulletin has no description...

MINI-FVG8-3G67-MJRQ

Bulletin has no description...

MINI-5W4W-H72P-4458

Bulletin has no description...

MINI-96J6-9VFP-J96Q

Bulletin has no description...

Hackers Spend Nearly $7 Million on Expired Domains to Redirect Traffic to Scams and Malware

Threat actors are acquiring expired domains to inherit website traffic and reputation to redirect victims to scams and malware on a large scale. DNS threat intelligence firm Infoblox has given the name dropcatch domains to those that get a second chance, where an expired domain becomes available...

MINI-4V59-G4V5-G4C8

Bulletin has no description...

MINI-24G7-W97V-6X5X

Bulletin has no description...

Who’s Tracking You? Use This New Service to Find Out

It can be daunting to determine who's responsible for showing ads on the websites we visit, or who's harvesting data from the mobile apps we use every day. That information is already semi-public, but it is not easily parsed and traditionally much of it has remained walled away in the hands of...

China-Linked Jewelbug Uses XG-Web for Government Espionage and Crypto Fraud

The China-linked threat actor known as Jewelbug has been observed carrying out cyber espionage operations targeting governments and militaries, while simultaneously engaging in cryptocurrency fraud. "Both missions are administered from a single control panel, XG-Web , a browser-centric...

Why API Discovery Is Critical for Modern AppSec Programs

Hidden API Estate And AI-speed Recon Are Reshaping Modern Application Risk Key Takeaways Unknown APIs create unattributed exposure , and such exposure rarely gets tested. Attackers build their own inventory through live reconnaissance; they do not wait for your spreadsheet. API discovery must pul...

What 50 open source projects taught us about security in the AI era

AI is changing the pace of open source development and the security challenges that come with it. Maintainers are reviewing unfamiliar contributions, managing new attack surfaces, and responding to vulnerabilities with limited time and resources. Session 4 of the GitHub Secure Open Source Fund...