[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> TODAY'S SUMMARY (152 articles)

|

// AI-powered summary generated at 20:01

> CVE-2025-47967 Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability
Insufficient ui warning of dangerous operations in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network.
> CVE-2025-49728 Microsoft PC Manager Security Feature Bypass Vulnerability
Cleartext storage of sensitive information in Microsoft PC Manager allows an unauthorized attacker to bypass a security feature locally.
> ZDI-25-894: Digilent WaveForms DWF3WORK File Parsing Directory Traversal Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Digilent WaveForms. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The fol...
> CVE-2025-54900 Microsoft Excel Remote Code Execution Vulnerability
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action...
> CVE-2025-54901 Microsoft Excel Information Disclosure Vulnerability
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action...
> Miljödata - 870,108 breached accounts
In August 2025, the Swedish system supplier Miljödata was the victim of a ransomware attack. Following the attack, data was subsequently published on the dark web and included 870k unique email addresses across various compromised files. Data also included names, phone numbers, physical addresses, d...
> CVE-2025-54910 Microsoft Office Remote Code Execution Vulnerability
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action...
> [remote] Ilevia EVE X1/X5 Server 4.7.18.0.eden - Reverse Rootshell
Ilevia EVE X1/X5 Server 4.7.18.0.eden - Reverse Rootshell
> [local] Microsoft Windows Server 2025 Hyper-V NT Kernel Integration VSP - Elevation of Privilege
Microsoft Windows Server 2025 Hyper-V NT Kernel Integration VSP - Elevation of Privilege
> Oxford County
Oxford County a été victime d'une cyberattaque, l'administration du comté a publié une déclaration à ce sujet. La cyberattaque a eu lieu le 16 septembre 2025. Les détails de l'attaque ne sont pas encore connus.
> [remote] ClipBucket 5.5.0 - Arbitrary File Upload
ClipBucket 5.5.0 - Arbitrary File Upload
> [remote] ClipBucket 5.5.2 Build #90 - Server-Side Request Forgery (SSRF)
ClipBucket 5.5.2 Build #90 - Server-Side Request Forgery (SSRF)
> Chester County Library System
Le système de bibliothèque du comté de Chester en Pennsylvanie a subi une panne de plusieurs jours en raison d'une attaque de ransomware, affectant les 18 succursales et perturbant les services publics. Les services de téléphone et d'internet ont été rétablis le 25 septembre, mais des problèmes d'e-...
> [webapps] Tourism Management System 2.0 - Arbitrary Shell Upload
Tourism Management System 2.0 - Arbitrary Shell Upload
> [webapps] Casdoor 2.55.0 - Cross-Site Request Forgery (CSRF)
Casdoor 2.55.0 - Cross-Site Request Forgery (CSRF)
> Form Energy
Form Energy a subi une faille de sécurité qui a exposé des informations personnelles sensibles de ses employés actuels et anciens, y compris des noms, adresses, dates de naissance et numéros de sécurité sociale. L'entreprise a détecté l'attaque le 16 septembre 2025 et a commencé à notifier les perso...
> [webapps] dotCMS 25.07.02-1 - Authenticated Blind SQL Injection
dotCMS 25.07.02-1 - Authenticated Blind SQL Injection
> [webapps] ELEX WooCommerce WordPress Plugin 1.4.3 - SQL Injection
ELEX WooCommerce WordPress Plugin 1.4.3 - SQL Injection
> Fine Line Woodworking
Cette victime n'a pas été revendiquée par Akira, mais un affidé de l'enseigne divulgue des données qu'il lui attribue.
> [webapps] XWiki Platform 15.10.10 - Metasploit Module for Remote Code Execution (RCE)
XWiki Platform 15.10.10 - Metasploit Module for Remote Code Execution (RCE)