PT-2025-23183 · Opensuse +1 · Brltty

Name of the Vulnerable Software and Affected Versions: brltty affected versions not specified Description: The brltty software contained an issue where the brlapi.key file was temporarily world-readable during creation. This could potentially allow unauthorized access to the key file...

PT-2025-23182 · Suse · Brltty

This update for brltty fixes the following issues: - Avoid having brlapi.key temporarily world-readable during creation bsc1235438...

PT-2025-23184 · Suse · Brltty

This update for brltty fixes the following issues: - Avoid having brlapi.key temporarily world-readable during creation bsc1235438...

Is Artificial Intelligence Generated Image Detection a Solved Problem?

The rapid advancement of generative models, such as GANs and Diffusion models, has enabled the creation of highly realistic synthetic images, raising serious concerns about misinformation, deepfakes, and copyright infringement. Although numerous Artificial Intelligence Generated Image AIGI...

Nuclei 3.4.4

Nuclei is a modern, high-performance vulnerability scanner that leverages simple YAML-based templates. It empowers you to design custom vulnerability detection scenarios that mimic real-world conditions, leading to zero false positives...

rpm-ostree: world-readable /etc/shadow file

A security vulnerability has been discovered within rpm-ostree, pertaining to the /etc/shadow file in default builds having the world-readable bit enabled. This issue arises from the default permissions being set at a higher level than recommended, potentially exposing sensitive authentication da...

PT-2025-21003

Name of the Vulnerable Software and Affected Versions Windows Common Log File System Driver affected versions not specified Description The issue is related to a use-after-free vulnerability in the Windows Common Log File System Driver, which allows an authorized attacker to elevate privileges...

PT-2025-21008 · Microsoft · Windows Common Log File System Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Common Log File System Driver affected versions not specified Description: The issue is related to improper input validation in the Windows Common Log File System Driver, which allows an authorized attacker to elevate privileges...

Siemens Teamcenter Visualization 缓冲区错误漏洞

Siemens Teamcenter Visualization is a software from Siemens Germany that provides teamwork capabilities for designing 2D and 3D scenarios. The software simplifies the engineering and manufacturing process by creating virtual prototypes from multiple mechanical computer-aided design MCAD formats. ...

ABAC Lab: an Interactive Platform for Attribute-Based Access Control Policy Analysis, Tools, and Datasets

Attribute-Based Access Control ABAC provides expressiveness and flexibility, making it a compelling model for enforcing fine-grained access control policies. To facilitate the transition to ABAC, extensive research has been conducted to develop methodologies, frameworks, and tools that assist...

OESA-2025-1469 cobbler security update

Cobbler is a network install server. Cobbler supports PXE, ISO virtualized installs, and re-installing existing Linux machines. The last two modes use a helper tool, 'koan', that integrates with cobbler. Cobbler's advanced features include importing distributions from DVDs and rsync mirrors,...

OESA-2025-1468 cobbler security update

Cobbler is a network install server. Cobbler supports PXE, ISO virtualized installs, and re-installing existing Linux machines. The last two modes use a helper tool, 'koan', that integrates with cobbler. Cobbler's advanced features include importing distributions from DVDs and rsync mirrors,...

Safety Analysis in the NGAC Model

We study the safety problem for the next-generation access control NGAC model. We show that under mild assumptions it is coNP-complete, and under further realistic assumptions we give an algorithm for the safety problem that significantly outperforms naive brute force search. We also show that...

RiM: Record, Improve and Maintain Physical Well-Being Using Federated Learning

In academic settings, the demanding environment often forces students to prioritize academic performance over their physical well-being. Moreover, privacy concerns and the inherent risk of data breaches hinder the deployment of traditional machine learning techniques for addressing these health...

What Analyzing Hundreds of Thousands of Cloud Environments Taught Us About Data Exposure

Wiz Research reveals the latest cloud data security trends across hundreds of thousands of real-world environments...

A Numerical Gradient Inversion Attack in Variational Quantum Neural-Networks

The loss landscape of Variational Quantum Neural Networks VQNNs is characterized by local minima that grow exponentially with increasing qubits. Because of this, it is more challenging to recover information from model gradients during training compared to classical Neural Networks NNs. In this...

OBLIVIATE: Robust and Practical Machine Unlearning for Large Language Models

Large language models LLMs trained over extensive corpora risk memorizing sensitive, copyrighted, or toxic content. To address this, we propose OBLIVIATE, a robust unlearning framework that removes targeted data while preserving model utility. The framework follows a structured process: extractin...

CAASM in Action: What It Really Looks Like When It Works

Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all the key takeaways into a handy audio summary. Our AI-driven podcasts are fit for on the go. Click right here to hear it all on CAASM & CDMB Inefficiencies! You’ve heard the promises. The...

Malicious code in world-id-discord (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17c2aa40d0cfe3dd971a7de35ba8d570a70d3b34f516dd5d69eff3bd7309bf96 Any computer that has this package installed or running should be considered...

MAL-2025-3927 Malicious code in world-id-discord (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17c2aa40d0cfe3dd971a7de35ba8d570a70d3b34f516dd5d69eff3bd7309bf96 Any computer that has this package installed or running should be considered...