Like SEO, LLMs May Soon Fall Prey to Phishing Scams
Just as attackers have used SEO techniques to poison search engine results, they could rinse and repeat with artificial intelligence and the responses LLMs generate from user prompts.
Aggregator
CVE-2025-45006 | Open-Source RISC-V Processor f517abb privileges assignment (EUVD-2025-19672)
9 months 1 week ago
A vulnerability was found in Open-Source RISC-V Processor f517abb and classified as critical. This issue affects some unknown processing. The manipulation leads to incorrect privilege assignment.
The identification of this vulnerability is CVE-2025-45006. The attack needs to be initiated within the local network. There is no exploit available.
It is recommended to apply a patch to fix this issue.
vuldb.com
CVE-2025-52101 | linjiashop up to 0.9 access control (EUVD-2025-19751)
9 months 1 week ago
A vulnerability has been found in linjiashop up to 0.9 and classified as critical. This vulnerability affects unknown code. The manipulation leads to improper access controls.
This vulnerability was named CVE-2025-52101. The attack needs to be done within the local network. There is no exploit available.
vuldb.com
CVE-2025-53104 | gluestack-ui discussion-to-slack.yml command injection (e6b4271 / EUVD-2025-19665)
9 months 1 week ago
A vulnerability has been found in gluestack-ui and classified as critical. This vulnerability affects unknown code of the file discussion-to-slack.yml. The manipulation leads to command injection.
This vulnerability was named CVE-2025-53104. The attack can be initiated remotely. There is no exploit available.
It is recommended to apply a patch to fix this issue.
vuldb.com
CVE-2025-27153 | pluginsGLPI escalade up to 2.9.10 access control (GHSA-pvqv-8r3r-47m9 / EUVD-2025-19663)
9 months 1 week ago
A vulnerability has been found in pluginsGLPI escalade up to 2.9.10 and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to improper access controls.
This vulnerability is known as CVE-2025-27153. The attack can be launched remotely. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2025-53107 | cyanheads git-mcp-server up to 2.1.4 child_process command injection (GHSA-3q26-f695-pp76 / EUVD-2025-19657)
9 months 1 week ago
A vulnerability, which was classified as critical, was found in cyanheads git-mcp-server up to 2.1.4. This affects the function child_process. The manipulation leads to command injection.
This vulnerability is uniquely identified as CVE-2025-53107. It is possible to initiate the attack remotely. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2025-53103 | junit-team junit-framework up to 5.13.1 XML File Parser cleartext storage (GHSA-m43g-m425-p68x / EUVD-2025-19655)
9 months 1 week ago
A vulnerability classified as problematic was found in junit-team junit-framework up to 5.13.1. This vulnerability affects unknown code of the component XML File Parser. The manipulation leads to cleartext storage of sensitive information.
This vulnerability was named CVE-2025-53103. Attacking locally is a requirement. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2025-45081 | IITB SSO 1.1.0 Setting information disclosure (EUVD-2025-19653)
9 months 1 week ago
A vulnerability was found in IITB SSO 1.1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Setting Handler. The manipulation leads to information disclosure.
This vulnerability is known as CVE-2025-45081. The attack can only be initiated within the local network. There is no exploit available.
vuldb.com
CVE-2025-6600 | GitHub Enterprise Server up to 3.17.1 Search API Endpoint information disclosure (EUVD-2025-19654)
9 months 1 week ago
A vulnerability, which was classified as problematic, has been found in GitHub Enterprise Server up to 3.17.1. This issue affects some unknown processing of the component Search API Endpoint. The manipulation leads to information disclosure.
The identification of this vulnerability is CVE-2025-6600. The attack may be initiated remotely. There is no exploit available.
vuldb.com
CVE-2025-32297 | Simple Link Directory Plugin up to 14.7.3 on WordPress sql injection
9 months 1 week ago
A vulnerability, which was classified as critical, was found in Simple Link Directory Plugin up to 14.7.3 on WordPress. This affects an unknown part. The manipulation leads to sql injection.
This vulnerability is uniquely identified as CVE-2025-32297. It is possible to initiate the attack remotely. There is no exploit available.
vuldb.com
CVE-2025-53302 | Constructor Plugin up to 1.6.5 on WordPress authorization
9 months 1 week ago
A vulnerability, which was classified as critical, has been found in Constructor Plugin up to 1.6.5 on WordPress. Affected by this issue is some unknown functionality. The manipulation leads to missing authorization.
This vulnerability is handled as CVE-2025-53302. The attack may be launched remotely. There is no exploit available.
vuldb.com
AT&T rolls out "Wireless Lock" feature to block SIM swap attacks
9 months 1 week ago
AT&T has launched a new security feature called "Wireless Lock" that protects customers from SIM swapping attacks by preventing changes to their account information and the porting of phone numbers while the feature is enabled. [...]
Lawrence Abrams
Думали, возраст — это цифра? Один МРТ-снимок предскажет вашу смерть с точностью 40%
9 months 1 week ago
Новый инструмент предсказывает деменцию, болезни и даже смерть.
Qilin
9 months 1 week ago
You must login to view this content
cohenido
Qilin
9 months 1 week ago
You must login to view this content
cohenido
Hacktivist Group Claimed Attacks Across 20+ Critical Sectors Following Iran–Israel Conflict
9 months 1 week ago
The escalating tensions between Iran and Israel have triggered an unprecedented surge in hacktivist cyber operations, with over 80 distinct groups launching coordinated attacks across 18 critical infrastructure sectors. Following Israeli airstrikes on Iranian military and nuclear facilities in June 2025, pro-Iranian and pro-Palestinian hacktivist collectives mobilized almost immediately, targeting Israeli government systems, energy infrastructure, […]
The post Hacktivist Group Claimed Attacks Across 20+ Critical Sectors Following Iran–Israel Conflict appeared first on Cyber Security News.
Tushar Subhra Dutta
LevelBlue Acquires Trustwave, Forms World's Largest Independent MSSP
9 months 1 week ago
As the largest managed security services provider, the combined entity will offer cyber consulting, managed detection and response, and incident response services.
Jeffrey Schwartz
Переходите по ссылкам осторожнее: хакеры научились заражать Windows без взлома
9 months 1 week ago
Заражение начинается с невинного визита, а заканчивается потерей контроля.
Scope, Scale of Spurious North Korean IT Workers Emerges
9 months 1 week ago
Microsoft warns thousands of North Korean workers have infiltrated tech, manufacturing, and transportation sectors to steal money and data.
Becky Bracken
Ransomware Reshaped How Cyber Insurers Perform Security Assessments
9 months 1 week ago
Cyber-insurance companies were forced to adapt once ransomware skyrocketed and highlighted crucial security weaknesses among organizations in all sectors.
Arielle Waldman