IT-Sentinel

> Fortinet Warns of Active Exploitation of FortiOS SSL VPN 2FA Bypass Vulnerability

[SOURCE] The Hacker News [LANGUAGE: EN] [DATE: 2025-12-25 08:22]

Fortinet on Wednesday said it observed "recent abuse" of a five-year-old security flaw in FortiOS SSL VPN in the wild under certain configurations. The vulnerability in question is CVE-2020-12812 (CVSS score: 5.2), an improper authentication vulnerability in SSL VPN in FortiOS that could allow a use...

> CISA Flags Actively Exploited Digiever NVR Vulnerability Allowing Remote Code Execution

[SOURCE] The Hacker News [LANGUAGE: EN] [DATE: 2025-12-25 08:07]

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a security flaw impacting Digiever DS-2105 Pro network video recorders (NVRs) to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerability, tracked as CVE-2023-52163 (CVSS score:...

> Infosecurity.US Wishes For Your Merry Christmas And Happy New Year

[SOURCE] Security Boulevard [LANGUAGE: EN] [DATE: 2025-12-25 08:00]

Permalink The post Infosecurity.US Wishes For Your Merry Christmas And Happy New Year appeared first on Security Boulevard.

> 2025年暗号資産規制の総括と今後の論点

[SOURCE] Chainalysis [LANGUAGE: EN] [DATE: 2025-12-25 07:05]

※この記事は自動翻訳されています。正確な内容につきましては原文をご参照ください。暗号資産に関する規制の動きを追っていると、2024年12月の状況が、すでにかなり前のことのように感じられます。たった12か月前と比べても、現在の世界全体の政策環境は大きく変化しました。変化のスピードは非常に速く、その勢いが弱まる...

> CERN: how does the international research institution manage risk?

[SOURCE] CSO Online [LANGUAGE: EN] [DATE: 2025-12-25 07:00]

There are few research institutions in the world with the size and scope of the European Organization for Nuclear Research, CERN. Founded in 1954 by 12 European countries, the European Laboratory for Elementary Particle Physics is located in the Swiss town of Meyrin, in the ca...

> Quantum-resistant key management for AI model deployments.

[SOURCE] Security Boulevard [LANGUAGE: EN] [DATE: 2025-12-25 04:43]

Discover how quantum-resistant key management secures AI model deployments, protecting against quantum computing threats with advanced encryption and zero-trust strategies. The post Quantum-resistant key management for AI model deployments. appeared first on Security Boulevard.

> CVE-2025-3001 PyTorch torch.lstm_cell memory corruption

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-25 01:38]

Information published.

> CVE-2025-68615 Net-SNMP snmptrapd crash

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-25 01:38]

Information published.

> [webapps] WordPress Quiz Maker 6.7.0.56 - SQL Injection

[SOURCE] Exploit-DB [LANGUAGE: EN] [DATE: 2025-12-25 00:00]

WordPress Quiz Maker 6.7.0.56 - SQL Injection

> CVE-2025-68476 KEDA has Arbitrary File Read via Insufficient Path Validation in HashiCorp Vault Service Account Credential

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-25 01:37]

Information published.

> CVE-2025-68733 smack: fix bug: unprivileged task can create labels

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-25 01:06]

Information published.

> [webapps] Chained Quiz 1.3.5 - Unauthenticated Insecure Direct Object Reference via Cookie

[SOURCE] Exploit-DB [LANGUAGE: EN] [DATE: 2025-12-25 00:00]

Chained Quiz 1.3.5 - Unauthenticated Insecure Direct Object Reference via Cookie

> CVE-2023-54061 x86: fix clear_user_rep_good() exception handling annotation

[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-25 01:06]

Information published.

> CVE-2025-68740 ima: Handle error code returned by ima_filter_rule_match()