[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox
📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> Indian government reveals GPS spoofing at eight major airports
[SOURCE] The Register Security [LANGUAGE: EN] [DATE: 2025-12-03 02:56]
Extra infosec investments are taxiing towards the runway India’s Civil Aviation Minister has revealed that local authorities have detected GPS spoofing and jamming at eight major airports.…
> ISC Stormcast For Wednesday, December 3rd, 2025 https://isc.sans.edu/podcastdetail/9722, (Wed, Dec 3rd)
[SOURCE] SANS ISC [LANGUAGE: EN] [DATE: 2025-12-03 02:45]
> DOJ takes down Myanmar scam center website spoofing TickMill trading platform
[SOURCE] Recorded Future [LANGUAGE: EN] [DATE: 2025-12-03 02:30]
The FBI said several victims used the domain and told agents that they were shown lucrative returns on what they thought were legitimate investments.
> CVE-2025-11494 GNU Binutils Linker elfxx-x86.c _bfd_x86_elf_late_size_sections out-of-bounds
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-03 01:39]
Information published.
> CVE-2025-64505 LIBPNG is vulnerable to a heap buffer overflow in `png_do_quantize` via malformed palette index
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-03 01:38]
Information published.
> The Browser Defense Playbook: Stopping the Attacks That Start on Your Screen
[SOURCE] Palo Alto Unit 42 [LANGUAGE: EN] [DATE: 2025-12-03 00:00]
85% of daily work occurs in the browser. Unit 42 outlines key security controls and strategies to make sure yours is secure. The post The Browser Defense Playbook: Stopping the Attacks That Start on Your Screen appeared first on Unit 42.
> CVE-2025-64506 LIBPNG is vulnerable to a heap buffer over-read in `png_write_image_8bit` with grayscale+alpha or RGB/RGBA images
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-03 01:38]
Information published.
> CVE-2025-38659 gfs2: No more self recovery
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-03 01:38]
Information published.
> Russia Wants This Mega Missile to Intimidate the West, but It Keeps Crashing
[SOURCE] Wired Security [LANGUAGE: EN] [DATE: 2025-12-03 00:00]
One of Vladimir Putin’s favorite sabers to rattle seems to have lost its edge.
> CVE-2025-38626 f2fs: fix to trigger foreground gc during f2fs_map_blocks() in lfs mode
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-03 01:38]
Information published.
> CVE-2025-38615 fs/ntfs3: cancle set bad inode after removing name fails
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-03 01:38]
Information published.
> [webapps] MobileDetect 2.8.31 - Cross-Site Scripting (XSS)
[SOURCE] Exploit-DB [LANGUAGE: EN] [DATE: 2025-12-03 00:00]
MobileDetect 2.8.31 - Cross-Site Scripting (XSS)
> CVE-2025-38597 drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-03 01:38]
Information published.
> CVE-2025-11932 Timing Side-Channel in PSK Binder Verification
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-03 01:37]
Information published.
> [webapps] phpIPAM 1.4 - SQL-Injection
[SOURCE] Exploit-DB [LANGUAGE: EN] [DATE: 2025-12-03 00:00]
phpIPAM 1.4 - SQL-Injection
> CVE-2025-12889 TLS 1.2 Client Can Downgrade Digest Used
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-03 01:37]
Information published.
> CVE-2025-12888 Constant Time Issue with Xtensa-based ESP32 and X22519
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-03 01:36]
Information published.
> [webapps] OpenRepeater 2.1 - OS Command Injection
[SOURCE] Exploit-DB [LANGUAGE: EN] [DATE: 2025-12-03 00:00]
OpenRepeater 2.1 - OS Command Injection
> CVE-2025-11931 Integer Underflow Leads to Out-of-Bounds Access in XChaCha20-Poly1305 Decrypt
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-03 01:36]
Information published.
> CVE-2025-11936 Potential DoS Vulnerability through Multiple KeyShareEntry with Same Group in TLS 1.3 ClientHello
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-03 01:36]
Information published.