De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
YOURLS 1.8.2 - Cross-Site Request Forgery (CSRF)
phpMyFAQ 3.1.7 - Reflected Cross-Site Scripting (XSS)
La ministre Samuel Migaľ a annoncé que l'unité gouvernementale de cybersécurité CSIRT intervient au ministère de l'économie de la République slovaque en raison d'une attaque contre les serveurs. Les détails ne peuvent pas être divulgués pour ne pas compromettre l'enquête. L'unité CSIRT est une équip...
phpIPAM 1.5.1 - SQL Injection
Piwigo 13.6.0 - SQL Injection
Dealerholding Van Mossel a été victime d'une cyberattaque, l'entreprise a pris des mesures pour protéger ses systèmes. Les détails de l'attaque ne sont pas encore connus, notamment si des informations ont été compromises. L'entreprise a déconnecté certaines parties de ses systèmes pour prévenir d'év...
phpIPAM 1.6 - Reflected-Cross-Site Scripting (XSS)
phpIPAM 1.6 - Reflected Cross-Site Scripting (XSS)
H&N Tax, Inc. dba CSA Tax experienced a network disruption on December 2, 2025, which led to unauthorized access to certain information stored on their network. The potentially affected data may have included first and last names, in combination with Social Security numbers. A cyberattack was claime...
&#;x26;#;x5b;This is a Guest Diary by James Woodworth, an ISC intern as part of the SANS.edu Bachelor&#;x26;#;39;s Degree in Applied Cybersecurity (BACS) program &#;x26;#;x5b;1].
The company’s latest security update contains the second-highest number of defects patched so far this year.
The post Google addresses 107 Android vulnerabilities, including two zero-days appeared first on CyberScoop.
The Glassworm campaign, which first emerged on the OpenVSX and Microsoft Visual Studio marketplaces in October, is now in its third wave, with 24Â new packages added on the two platforms. [...]
Artificial intelligence isn’t just another tool in the security stack anymore – it’s changing how software is written, how vulnerabilities spread and how long attackers can sit undetected inside complex environments. Security researcher and startup founder Guy Arazi unpacks why AI has become both a...
Australian Michael Clapsis got 7 years and 4 months in prison for Wi-Fi attacks at airports and on flights, stealing sensitive data. Australian man Michael Clapsis (44) was sentenced to 7 years and 4 months in prison for conducting Wi-Fi attacks at airports and on flights, stealing sensitive informa...
Yonhap News Agency reported on Friday that South Korean government officials are involved in the investigation surrounding $30 million worth of cryptocurrency that was stolen from Upbit on Wednesday evening.
Wisconsin-based Illuminate Education will implement a data security program and delete unnecessary data under an agreement with the Federal Trade Commission prompted by a 2021 breach of the company's network.
And some are still active in the Microsoft Edge store A seven-year malicious browser extension campaign infected 4.3 million Google Chrome and Microsoft Edge users with malware, including backdoors and spyware sending people's data to servers in China. And, according to Koi researchers, five of the...
The popular open-source SmartTube YouTube client for Android TV was compromised after an attacker gained access to the developer's signing keys, leading to a malicious update being pushed to users. [...]
Europol announced the seizure of Cryptomixer’s official website, as well as 25 million euros and 12 terabytes of data from the mixer's service.