Aggregator

Legacy Windows protocols are still exposing organizations to credential theft, Resecurity found

M & E Global Group Falls Victim to Qilin Ransomware

A vulnerability classified as problematic has been found in Apache Geode up to 1.15.1. This impacts an unknown function of the component web-api. The manipulation leads to cross site scripting. This vulnerability is documented as CVE-2024-44088. The attack can be initiated remotely. There is not any exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Centreon Infra Monitoring up to 23.10.27/24.04.17/24.10.12. Affected is an unknown function of the component Configuration Module. The manipulation results in os command injection. This vulnerability is reported as CVE-2025-5946. The attack can be launched remotely. No exploit exists. Upgrading the affected component is advised.

A vulnerability categorized as problematic has been discovered in Centreon Infra Monitoring up to 23.10.27/24.04.17/24.10.12. The impacted element is an unknown function of the component HTTP Loader Widget Module. Such manipulation leads to cross site scripting. This vulnerability is referenced as CVE-2025-8428. It is possible to launch the attack remotely. No exploit is available. It is advisable to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in AMD EPYC 7003 Processors and EPYC 9005 Processors. Affected by this vulnerability is an unknown functionality. This manipulation causes improper access controls. This vulnerability appears as CVE-2025-0033. The attack requires local access. There is no available exploit. It is advisable to upgrade the affected component.

A vulnerability was found in EspoCRM up to 9.1.8. It has been classified as problematic. This issue affects some unknown processing of the file api/v1/User of the component Article Handler. The manipulation of the argument body leads to cross-site request forgery. This vulnerability is uniquely identified as CVE-2025-59428. The attack is possible to be carried out remotely. No exploit exists. Upgrading the affected component is recommended.

Taiwan’s National Security Bureau says network intrusions and influence operations by China have increased this year, with critical infrastructure drawing the most attention.

Learn how microsegmentation builds OT breach ready cyber defense, limits lateral movement, and protects industrial systems from disruptions.

The post What is OT Breach Ready Cyber Defense? appeared first on ColorTokens.

The post What is OT Breach Ready Cyber Defense? appeared first on Security Boulevard.

As a leader in AI-centric DevSecOps, Sonatype has been recognized as a Visionary in the 2025 Gartner Magic Quadrant for Application Security Testing (AST).

The post Sonatype Named a Visionary in the 2025 Gartner® Magic Quadrant™ for Application Security Testing appeared first on Security Boulevard.

The Australian airline Qantas confirmed that hackers have published customer data they stole by exploiting Salesforce technology.

Наземная война входит в эпоху ИИ — без видимого врага и без командных задержек.

A vulnerability identified as very critical has been detected in Jaspersoft JasperReport Servers, Studio Community Edition, JasperReports Server, JasperReports Library Professional, Studio Professional, JasperReports IO Professional, JasperReports IO At-Scale and JasperReports Web Studio. Affected is an unknown function. Performing manipulation results in deserialization. This vulnerability was named CVE-2025-10492. The attack may be initiated remotely. There is no available exploit.