cyberintel.kalymoon.com · 42403 articles · updated every 4 hours · grows forever
A vulnerability marked as critical has been reported in Ezbsystems Softdisk 3.0.3 . Affected is an unknown function. The manipulation of the argument Registration Name leads to buffer overflow. This v…
A vulnerability described as critical has been identified in Ezbsystems Easyboot 6.6.0 . Affected by this vulnerability is an unknown functionality. The manipulation results in buffer overflow. This v…
A vulnerability classified as critical has been found in Bome Restorator 1793 . Affected by this issue is some unknown functionality. This manipulation of the argument Name causes buffer overflow. Thi…
A vulnerability classified as critical was found in Mersenne Prime95 29.4b7 . This affects an unknown part. Such manipulation of the argument optional proxy password leads to buffer overflow. This vul…
A vulnerability, which was classified as critical , has been found in Wansview 1.0.2 . This vulnerability affects unknown code. Performing a manipulation of the argument Camera name/DID number results…
A vulnerability, which was classified as critical , was found in Pj64-Emu Project64 2.3.2 . This issue affects some unknown processing of the component Directories Interface . Executing a manipulation…
A vulnerability has been found in Apache Storm Prometheus Reporter up to 2.8.6 and classified as critical . Impacted is an unknown function. The manipulation leads to improper certificate validation. …
A vulnerability was found in Apache Storm Client up to 2.8.6 and classified as critical . The affected element is an unknown function of the component TLS Client Authentication Failure Handler . The m…
A vulnerability was found in code-projects Invoice System in Laravel 1.0 . It has been classified as critical . The impacted element is an unknown function of the file /company . This manipulation of …
A vulnerability was found in code-projects Invoice System in Laravel 1.0 . It has been declared as problematic . This affects an unknown function. Such manipulation leads to cross-site request forgery…
A vulnerability was found in code-projects Invoice System in Laravel 1.0 . It has been rated as critical . This impacts an unknown function of the file /item of the component API Endpoint . Performing…
A vulnerability categorized as problematic has been discovered in code-projects Invoice System in Laravel 1.0 . Affected is an unknown function of the file /item . Executing a manipulation of the argu…
Also: Embedded AI in Pharmaceutical Sector, the Story Behind Apple's CEO Change In this week's panel, four ISMG editors examine what’s really behind Apple's CEO transition, how pharmaceutical giants a…
State-sponsored threat actors are actively targeting Cisco Firepower devices by chaining known vulnerabilities to deploy a highly customized backdoor. Cisco Talos recently discovered that the espionag…
Home security giant ADT Inc. has confirmed a data breach after the notorious threat group ShinyHunters claimed to have stolen over 10 million records and issued a ransom ultimatum — “Pay or Leak.” ADT…
A critical scope overreach vulnerability was recently identified in the Microsoft Entra Agent Identity Platform. The newly introduced Agent ID Administrator role allowed accounts to hijack arbitrary s…
OpenAI has announced a new Bio Bug Bounty program for GPT-5.5 as part of its efforts to improve safety controls for advanced AI systems and to address misuse in biology. The initiative invites qualifi…
Anthropic’s “Project Deal” has demonstrated that AI agents can autonomously negotiate and close real-world transactions, but the experiment also surfaced a quiet, troubling asymmetry: not all AI repre…
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical alert regarding two actively exploited vulnerabilities in SimpleHelp remote support software. Remote access tools are …
PhantomRPC, a newly identified architectural vulnerability in Windows Remote Procedure Call (RPC) that enables local privilege escalation to SYSTEM-level access, potentially affecting every version of…
A critical zero-day vulnerability in the Litecoin network was actively exploited to launch a denial-of-service (DoS) attack, temporarily disrupting operations across major mining pools before develope…
The GlassWorm supply chain attack targeting the Open VSX marketplace has escalated with the discovery of 73 new “sleeper” extensions. Identified in April 2026, this cluster marks a dangerous shift in …
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: SmokedMeat: Open-source tool shows what attackers do inside CI/CD pipelines Boost Security has release…
Dubbed GopherWhisper, the group relies on multiple Go-based backdoors alongside custom loaders and injectors. The post China-Linked APT GopherWhisper Abuses Legitimate Services in Government Attacks a…