This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. Th...
This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following...
Le site internet du Landkreis Schmalkalden-Meiningen a été victime d'une attaque informatique, la page est actuellement hors ligne. Les autorités travaillent à la création d'une page internet provisoire pour offrir les services essentiels. Les autres systèmes et données du Landratsamt ne sont pas af...
L'attaque n'a pas été revendiquée, mais l'enseigne Qilin divulgue des données présentées comme issues des systèmes d'Ashe.
CISA has launched a new Software Acquisition Guide Web Tool to enhance security in software procurement
C2 Vehicles experienced a network disruption, resulting in unauthorized access to certain files containing personal information. The affected data may have included names, Social Security numbers, and driver's license numbers. There is no evidence of misuse or attempted misuse of the impacted inform...
Wade Clark Mulcahy LLP experienced unauthorized access to certain information between August 25, 2025, and August 28, 2025. The types of information potentially impacted may have included names and other data elements. The organization has taken steps to address the incident and is providing complim...
While still in development, PromptLock is described as the “first known AI-powered ransomware” by ESET researchers
The Office of the Governor of Nevada revealed that the incident has shut down in-person State services, while government phone lines and websites are offline
Cline is quite a popular AI coding agent, according to the product website it has 2+ million downloads and over 47k stars on GitHub.
Unfortunately, Cline is vulnerable to data exfiltration through the rendering of markdown images from untrusted domains in the chat box.
This allows an adversary to ex...
A series of cyber-attacks against government organizations in Central Asia and Asia- Pacific has been linked to the ShadowSilk threat cluster
EIP-7730 enables hardware wallets to decode transactions into human-readable formats, eliminating blind signing vulnerabilities with minimal implementation effort for dApp developers.
Citrix customers are urged to patch their vulnerable NetScaler appliances, but “patching alone won’t cut it,” experts said
EU security agency ENISA is being handed €36m to operate the EU Cybersecurity Reserve
In a brand-new collaboration between ethical hacking and AppSec expert John Hammond and world-renowned security researcher James Kettle, the pair explore how tens of millions of websites are compromis
Cyberbullying is a fact of life in our digital-centric society, but there are ways to push back
Google is warning of a new credential theft campaign targeting Salesforce customers via Salesloft Drift
Abnormal AI said the campaign, which lures victims into downloading legitimate RMM software, marks a major evolution in phishing tactics
Presently sponsored by: 1Password Extended Access Management: Secure every sign-in for every app on every device.It seems like every manufacturer of anything electrical that goes in the house wants to be part of the IoT story these days. Further, they all want their own app, which means you have to...
This vulnerability could allow remote attackers to bypass authentication on systems that use the affected version of the Cockroach Labs cockroach-k8s-request-cert container image. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2025-9276.