[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> TODAY'S SUMMARY (1 articles)

|

// AI-powered summary generated at 00:00

> ISC Stormcast For Wednesday, October 22nd, 2025 https://isc.sans.edu/podcastdetail/9666, (Wed, Oct 22nd)
> Self-propagating worm found in marketplaces for Visual Studio Code extensions
A month after a self-propagating worm was discovered in the open source NPM code repository, a similar worm has been found targeting Visual Studio Code extensions in open marketplaces. Researchers at Israel-based Koi Security say the malware, which they dub GlassWorm, has b...
> CVE-2025-40013 ASoC: qcom: audioreach: fix potential null pointer dereference
Information published.
> CVE-2025-40016 media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID
Information published.
> Ubuntu 24.04: Linux Kernel Critical Information Leak USN-7833-2
Several security issues were fixed in the Linux kernel.
> CVE-2025-40011 drm/gma500: Fix null dereference in hdmi teardown
Information published.
> CVE-2025-40005 spi: cadence-quadspi: Implement refcount to handle unbind during busy
Information published.
> Ubuntu 25.04: Critical Info Leak Vulnerability in Linux Kernel USN-7834-1
Several security issues were fixed in the Linux kernel.
> CVE-2025-40010 afs: Fix potential null pointer dereference in afs_put_server
Information published.
> Ubuntu 25.04: Linux Kernel Critical Data Leak Advisory USN-7833-1
Several security issues were fixed in the Linux kernel.
> USN-7833-2: Linux kernel (Real-time) vulnerabilities
Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt discovered that some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information. A local attacker could possibly use this to expos...
> All You Need to Know About Palm Vein Unlocking Technology
Explore the security and development aspects of palm vein unlocking technology. Learn how it works, its benefits, and how to integrate it into your software. The post All You Need to Know About Palm Vein Unlocking Technology appeared first on Security Boulevard.
> Defining What It Means to Be Enterprise Ready
Explore the key features and requirements that define an 'Enterprise Ready' SSO solution. Learn about scalability, security, compliance, and integration for large organizations. The post Defining What It Means to Be Enterprise Ready appeared first on Security Boulevard.
> USN-7834-1: Linux kernel (Azure) vulnerabilities
Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt discovered that some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information. A local attacker could possibly use this to expos...
> Yunex GmbH
Yunex Traffic a récemment pris des mesures pour gérer un accès non autorisé à certaines parties de ses systèmes internes de développement de produits. Les systèmes et les services de l'entreprise sont toujours opérationnels. Une enquête approfondie a été lancée avec le soutien d'experts externes. (v...
> Eastern Promises: Mobile VRP Lessons for Bug Hunters
In the past few years, we’ve tried our hand at Vulnerability Reward Programs of all kinds of mobile vendors’ products and attack surfaces. Like many others, we’ve encountered as many misses as hits, learning valuable lessons from the mistakes we (and sometimes the vendors) have made. We presented ou...
> Multiples vulnérabilités dans Oracle Weblogic (22 octobre 2025)
De multiples vulnérabilités ont été découvertes dans Oracle Weblogic. Elles permettent à un attaquant de provoquer un déni de service à distance et une atteinte à la confidentialité des données.
> Multiples vulnérabilités dans GitLab (22 octobre 2025)
De multiples vulnérabilités ont été découvertes dans GitLab. Elles permettent à un attaquant de provoquer un déni de service à distance et un contournement de la politique de sécurité.
> Stadtwerke Clausthal-Zellerfeld
Un hackerangriff a visé les Stadtwerke Clausthal-Zellerfeld, provoquant une panne de leurs systèmes de communication. Les téléphones et les adresses e-mail ne fonctionnent plus, ce qui a des conséquences pour la population locale. Les Stadtwerke Clausthal-Zellerfeld sont actuellement hors service en...
> Multiples vulnérabilités dans les produits Atlassian (22 octobre 2025)
De multiples vulnérabilités ont été découvertes dans les produits Atlassian. Certaines d'entre elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à l'intégrité des données et un contournement de la politique de sécurité.