This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information.
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information.
Threat actors are exploiting an unauthenticated information disclosure vulnerability in the WordPress plugin Gravity SMTP, active on 100,000 sites. [...]
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information.
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information.
One of the worldâs top ransomware groups has given its criminal affiliates access to advanced tools capable of successfully disabling many of todayâs enterprise endpoint detection and response (EDR) products, new research by security company ESET has found.
The group in que...
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information.
Security researchers at Paradigm Shift have published a working exploit, dubbed usbliter8, that achieves arbitrary code execution inside the SecureROM of Apple's A12 and A13 chips.
That code is burned into the silicon at manufacture. No software update can reach it. Affected devices will carry this...
The Gentlemen ransomware-as-a-service (RaaS) operation is actively developing and maintaining a suite of endpoint detection and response (EDR) killers that it hands out to affiliates for impairing system defenses before deploying the encryptor.
This mature portfolio of EDR-terminating tools is cent...
A flaw was discovered in libconfig-inifiles-perl, a Perl module to read .ini-style configuration files, which may result in the execution of arbitrary shell commands or file overwrite when processing specially crafted file names. For the stable distribution (trixie), this problem has been fixed in
A flaw was discovered in libconfig-inifiles-perl, a Perl module to read .ini-style configuration files, which may result in the execution of arbitrary shell commands or file overwrite when processing specially crafted file names. For the stable distribution (trixie), this problem has been fixed in
La Cour de Justice de l'Union europĂ©enne, dans son arrĂȘt C-484/24, clarifie les conditions d'utilisation par une juridiction nationale de preuves contenant des donnĂ©es Ă caractĂšre personnel obtenues en violation du RGPD.Saisie par le tribunal supĂ©rieur du travail de Basse-Saxe dans un litige oĂč un e...
It was discovered that incorrect memory management in the ffmpeg plugin for GStreamer could result in heap memory corruption. For the stable distribution (trixie), this problem has been fixed in version 1.26.2-1+deb13u1. We recommend that you upgrade your gst-libav1.0 packages.
It was discovered that incorrect memory management in the ffmpeg plugin for GStreamer could result in heap memory corruption. For the stable distribution (trixie), this problem has been fixed in version 1.26.2-1+deb13u1. We recommend that you upgrade your gst-libav1.0 packages.
L'autorité italienne sanctionne une société pour avoir utilisé des données de contact acquises via une plateforme tierce à des fins de prospection commerciale, sans avoir vérifié l'existence d'une base juridique valide et sans avoir informé les personnes concernées.
Faits et contexte L'autorité i...
L'autorité italienne de protection des données (GPDP) sanctionne une administration régionale pour avoir communiqué par erreur la fiche d'évaluation d'une ancienne employée à son nouvel employeur, considérant que ni les mesures de protection apposées sur l'envoi, ni l'absence de préjudice concret, n...
Learn how to improve password manager adoption with rollout steps, onboarding tips, and policies your team can actually follow.
La publication par une commune d'une décision nominative relative à la démission d'un employé, sans base légale spécifique, constitue une diffusion illicite de données personnelles en violation des principes de licéité et de minimisation.
Faits et contexte L'autorité italienne de protection des d...
L'autorité italienne de protection des données (GPDP) sanctionne un fournisseur d'énergie pour des pratiques de télémarketing illicites, soulignant la responsabilité du responsable du traitement pour l'ensemble de la chaßne de traitement, y compris la sélection et la surveillance rigoureuse de ses p...
The Texas Parks and Wildlife Department (TPWD) disclosed a data breach at its license system vendor that exposed personal information for more than three million individuals. [...]