Aggregator
CVE-2025-10630 | grafana-zabbix-plugin up to 5.x on Grafana incorrect regex
CVE-2025-8531 | Mitsubishi Electric MELSEC-Q Q03UDVCPU length parameter
CVE-2025-10719 | WisdomGarden Tronclass up to 1.74 authorization
CVE-2025-10721 | Webull Investing & Trading App 11.2.5.63 on Android AndroidManifest.xml improper export of android application components
Submit #645019: SKTLab Mukbee 1.01.196 Task Hijacking [Accepted]
Submit #645014: ebull Technologies Pte. Ltd. webbull-stock 11.2.5.63 Task Hijacking [Accepted]
CVE-2025-10530 | Mozilla Firefox up to 142 authentication spoofing (WID-SEC-2025-2074)
CVE-2025-10531 | Mozilla Firefox up to 142 authentication bypass (WID-SEC-2025-2074)
CVE-2025-10532 | Mozilla Firefox up to 142 unusual condition (Nessus ID 265341 / WID-SEC-2025-2074)
CVE-2025-10529 | Mozilla Firefox up to 142 cross-domain policy (Nessus ID 265341 / WID-SEC-2025-2074)
CVE-2025-10527 | Mozilla Firefox up to 142 use after free (Nessus ID 265341 / WID-SEC-2025-2074)
Luxury Jeweler Tiffany Reports Data Breach Exposing User Personal Data
Luxury jeweler Tiffany and Company has confirmed a data breach that exposed the personal information of 2,590 customers. The company discovered unauthorized access to an external system on September 9, 2025, but determined the incident first occurred on May 12, 2025. Tiffany notified affected customers in writing on September 16, 2025, and filed a breach notification […]
The post Luxury Jeweler Tiffany Reports Data Breach Exposing User Personal Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
Тестовый аккаунт = полный доступ: забытый код Microsoft стал ключом ко всей инфраструктуре Azure
Surveying the Global Spyware Market
The Atlantic Council has published its second annual report: “Mythical Beasts: Diving into the depths of the global spyware market.”
Too much good detail to summarize, but here are two items:
First, the authors found that the number of US-based investors in spyware has notably increased in the past year, when compared with the sample size of the spyware market captured in the first Mythical Beasts project. In the first edition, the United States was the second-largest investor in the spyware market, following Israel. In that edition, twelve investors were observed to be domiciled within the United States—whereas in this second edition, twenty new US-based investors were observed investing in the spyware industry in 2024. This indicates a significant increase of US-based investments in spyware in 2024, catapulting the United States to being the largest investor in this sample of the spyware market. This is significant in scale, as US-based investment from 2023 to 2024 largely outpaced that of other major investing countries observed in the first dataset, including Italy, Israel, and the United Kingdom. It is also significant in the disparity it points to the visible enforcement gap between the flow of US dollars and US policy initiatives. Despite numerous US policy actions, such as the addition of spyware vendors on the ...
The post Surveying the Global Spyware Market appeared first on Security Boulevard.