[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> CVE-2025-68307 can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs
Information published.
> CVE-2025-68286 drm/amd/display: Check NULL before accessing
Information published.
> ownCloud urges users to enable MFA after credential theft reports
File-sharing platform ownCloud warned users today to enable multi-factor authentication (MFA) to block attackers using compromised credentials from stealing their data. [...]
> CVE-2025-68295 smb: client: fix memory leak in cifs_construct_tcon()
Information published.
> CVE-2025-68288 usb: storage: Fix memory leak in USB bulk transport
Information published.
> Owner of Stalkerware Maker pcTattletale Pleads Guilty to Hacking
Bryan Fleming, who founded the stalkerware business pcTattletale, pleaded guilty in federal court to hacking and conspiracy charges. Investigators said he crossed the line when he started marketing the software to people who wanted to covertly plant it on the smartphones of unsuspecting victims to...
> CVE-2025-68284 libceph: prevent potential out-of-bounds writes in handle_auth_session_key()
Information published.
> CVE-2025-68229 scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()
Information published.
> China intensifies Cyber-Attacks on Taiwan as Energy Sector Sees Tenfold Spike
Taiwan recorded an average of 2.63 million cyber intrusion attempts to it critical infrastructure per day coming from China in 2025
> CVE-2025-68214 timers: Fix NULL function pointer race in timer_shutdown_sync()
Information published.
> CVE-2025-68204 pmdomain: arm: scmi: Fix genpd leak on provider registration failure
Information published.
> Vulnerability in Totolink Range Extender Allows Device Takeover
An error in the firmware-upload handler leads to devices starting an unauthenticated root-level Telnet service. The post Vulnerability in Totolink Range Extender Allows Device Takeover appeared first on SecurityWeek.
> CVE-2025-68227 mptcp: Fix proto fallback detection with BPF
Information published.
> CVE-2025-68220 net: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on error
Information published.
> Critical n8n Vulnerability (CVSS 10.0) Allows Unauthenticated Attackers to Take Full Control
Cybersecurity researchers have disclosed details of yet another maximum-severity security flaw in n8n, a popular workflow automation platform, that allows an unauthenticated remote attacker to gain complete control over susceptible instances. The vulnerability, tracked as CVE-2026-21858 (CVSS score:...
> CVE-2025-68222 pinctrl: s32cc: fix uninitialized memory in s32_pinctrl_desc
Information published.
> CVE-2025-68235 nouveau/firmware: Add missing kfree() of nvkm_falcon_fw::boot
Information published.
> Several Code Execution Flaws Patched in Veeam Backup & Replication
Four vulnerabilities have been fixed in the latest release of Veeam Backup & Replication. The post Several Code Execution Flaws Patched in Veeam Backup & Replication appeared first on SecurityWeek.
> CVE-2025-38627 f2fs: compress: fix UAF of f2fs_inode_info in f2fs_free_dic
Information published.
> CVE-2025-38556 HID: core: Harden s32ton() against conversion to 0 bits
Information published.