Aggregator

A vulnerability categorized as problematic has been discovered in Mozilla Firefox up to 143. This impacts an unknown function of the component IPC Message Handler. Such manipulation leads to information disclosure. This vulnerability is listed as CVE-2025-11710. The attack may be performed from remote. There is no available exploit. It is advisable to upgrade the affected component.

A vulnerability identified as problematic has been detected in Mozilla Thunderbird up to 143. Affected is an unknown function of the component IPC Message Handler. Performing manipulation results in information disclosure. This vulnerability is cataloged as CVE-2025-11710. It is possible to initiate the attack remotely. There is no exploit available. You should upgrade the affected component.

A vulnerability labeled as problematic has been found in Mozilla Firefox up to 143. Affected by this vulnerability is an unknown functionality of the component Javascript Object Handler. Executing manipulation can lead to an unknown weakness. This vulnerability is registered as CVE-2025-11711. It is possible to launch the attack remotely. No exploit is available. The affected component should be upgraded.

A vulnerability marked as problematic has been reported in Mozilla Thunderbird up to 143. Affected by this issue is some unknown functionality of the component Javascript Object Handler. The manipulation leads to an unknown weakness. This vulnerability is documented as CVE-2025-11711. The attack can be initiated remotely. There is not any exploit available. It is suggested to upgrade the affected component.

A vulnerability was found in Mozilla Thunderbird up to 143 and classified as critical. Impacted is an unknown function of the component WebGL Texture Handler. Executing manipulation can lead to out-of-bounds write. The identification of this vulnerability is CVE-2025-11709. The attack may be launched remotely. There is no exploit available. It is suggested to upgrade the affected component.

Microsoft has confirmed that the September 2025 security updates are causing Active Directory issues on Windows Server 2025 systems. [...]

最近，一项国际调查揭露了一个名为Altamides的电话跟踪平台，这个平台已秘密运作20年，利用电信协议漏洞，

F5 Networks confirmed that a sophisticated nation-state threat actor infiltrated its systems, exfiltrating proprietary BIG-IP source code and confidential vulnerability information. The incident, which began in August 2025, targeted F5’s product development and engineering knowledge platforms, prompting an immediate response and a suite of mitigation efforts to safeguard customers and restore trust. Persistent Access Uncovered […]

The post Hackers Breach F5 and Stole BIG-IP Source Code and Undisclosed Vulnerability Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Alleged Data Breach of Teknobuilt

A vulnerability has been found in Mozilla Firefox up to 143 and classified as critical. This issue affects some unknown processing of the component WebGL Texture Handler. Performing manipulation results in out-of-bounds write. This vulnerability was named CVE-2025-11709. The attack may be initiated remotely. There is no available exploit. The affected component should be upgraded.

A flaw in the Slider Revolution plugin has exposed millions of WordPress sites to unauthorized file access

Om zorgprofessionals als civiele reserve in te kunnen zetten zijn Defensie en Stichting Extra ZorgSamen (EZS) gisteren een samenwerking aangegaan voor 4 jaar. Dit verhoogt versneld de operationele gereedheid van Defensie. In de toekomst zorgt EZS mogelijk ook voor reserves als technici, logistiek specialisten en veiligheidsexperts.

In mid-2025, Lab539 researchers observed an unexpected surge in a novel browser-based malware campaign dubbed “ClickFix.” Emerging quietly in July, the threat quickly expanded its reach by registering over 13,000 unique domains designed to lure users into executing malicious commands on their own devices. The attack leverages compromised or low-cost hosting infrastructure, including a significant […]

The post Hackers Registered 13,000+ Unique Domains and Leverages Cloudflare to Launch Clickfix Attacks appeared first on Cyber Security News.

× Unlock Exclusive Cyber Threat Intelligence

Powered by DarkWebInformer.com

Foundational access to breach intelligence. Track breaches, leaks, and threats in real time with high quality screenshots and concise expert summaries.

📚4,700+ Blog Posts (PRO/ELITE)
Continuously updated breach reports and threat summaries. 📢43,500+ Alerts (PRO/

US tech company F5 has suffered a breach, and the attackers made off with source code of and vulnerability information related to its BIG-IP family of networking and security products, the company confirmed today. BIG-IP vulnerabilities are often leveraged by attackers, and the fear is that the threat actor may use the stolen code to find more of them and use the knowledge to develop targeted exploits, the UK National Cyber Security Centre has noted. … More →

The post F5 data breach: “Nation-state attackers” stole BIG-IP source code, vulnerability info appeared first on Help Net Security.

美国网络安全公司 F5 披露，有国家背景的黑客入侵了其系统，窃取了未披露的 BIG-IP 漏洞信息和源代码。该公司是在 8 月 9 日首次发现其系统遭到入侵，而进一步调查发现黑客已经获得了很长时间的访问权限。调查显示，黑客窃取了该公司旗舰产品 BIG-IP 的源代码和未披露的漏洞信息，以及少量客户的配置和实现信息。 F5 在 170 个国家/地区有 23,000 名客户，财富 50 强企业有 48 家使用该公司产品。F5 声称，此次入侵未危及其软件供应链，也未导致任何可疑的代码修改。

Skyborne превращает автономные машины в бойцов спецподразделений.

F5, a leading provider of application security and delivery solutions, disclosed a major security incident. The company revealed that a sophisticated nation-state threat actor had gained long-term access to internal systems, exfiltrating sensitive files including BIG-IP source code and details on undisclosed vulnerabilities. While F5 emphasized that no critical exploits or active attacks on customers […]

The post F5 Breached – Hackers Stole BIG-IP Source Code and Undisclosed Vulnerabilities Data appeared first on Cyber Security News.

The GhostBat RAT campaign has emerged as a sophisticated threat targeting Indian Android users through counterfeit Regional Transport Office (RTO) applications. First observed in mid-2025, these malicious APKs masquerade as the official “mParivahan” app, exploiting user trust in government services. Distribution occurs primarily via smishing—WhatsApp messages and SMS containing shortened URLs redirecting victims to GitHub-hosted […]

The post GhostBat RAT Android Malware With Fake RTO Apps Steals Targeting Indian Users to Steal Banking Data appeared first on Cyber Security News.

Spanish fashion retailer MANGO is sending notices of a data breach to its customers, warning that its marketing vendor suffered a compromise exposing personal data. [...]