cyberintel.kalymoon.com · 42542 articles · updated every 4 hours · grows forever
A vulnerability described as critical has been identified in KLiK SocialMediaWebsite up to 1.0.1 . This vulnerability affects unknown code of the file /includes/get_message_ajax.php of the component P…
A vulnerability classified as problematic has been found in bacnet-stack BACnet Stack up to 1.4.2 . This issue affects the function wpm_decode_object_property of the component WritePropertyMultiple Se…
A vulnerability classified as problematic was found in bacnet-stack BACnet Stack up to 1.4.2 . Impacted is the function rpm_decode_object_id of the file src/bacnet/rpm.c of the component ReadPropertyM…
A vulnerability, which was classified as problematic , has been found in bacnet-stack BACnet Stack up to 1.4.2 . The affected element is the function rpm_decode_object_property of the file src/bacnet/…
A vulnerability, which was classified as critical , was found in Deskflow up to 1.26.0.138 . The impacted element is the function ClipboardChunk::assemble in the library src/lib/deskflow/IClipboard.cp…
A vulnerability has been found in AWS tough and tuftool 0.22.0/up to 0.21 and classified as problematic . This affects an unknown function. Performing a manipulation results in improper verification o…
A vulnerability was found in AWS tough and tuftool and classified as critical . This impacts the function copy_target/link_target . Executing a manipulation can lead to path traversal. This vulnerabil…
A vulnerability was found in AWS tough and tuftool up to 0.21.x . It has been classified as problematic . Affected is the function load_delegations . The manipulation leads to insufficient verificatio…
A vulnerability was found in deskflow up to 1.20.0/1.26.0.134 . It has been declared as critical . Affected by this vulnerability is an unknown functionality. The manipulation results in missing authe…
Unit 42 research reports that TGR-STA-1030 remains an active threat, particularly in Central and South America. The post TGR-STA-1030: New Activity in Central and South America appeared first on Unit …
Unit 42 analyzes npm supply chain evolution post-Shai Hulud. Discover wormable malware, CI/CD persistence, multi-stage attacks and more. The post The npm Threat Landscape: Attack Surface and Mitigatio…
For most security teams today, volume and access to intelligence isn’t the problem. It’s the speed at which they can turn that intelligence into action. .
'Firestarter' Backdoor Can Survive Reboots, Upgrades and Standard Fixes The Cybersecurity and Infrastructure Security Agency issued an emergency directive warning a newly-discovered Cisco backdoor can…
HHS OCR Breach Investigators Again Find All-Too-Common Risk Analysis Failures Faulty or non-existent security risk analyses cost a medical imaging provider, a women's healthcare group, a health plan a…
Acquisition Adds Advisory, GRC and Vulnerability Services to ImagineX's MDR Core TekStream acquired ImagineX’s cyber division to integrate advisory, vulnerability management and GRC with its MDR servi…
US House Republicans have introduced two major privacy proposals that would reshape how US companies collect, process, and retain consumer data: the SECURE Data Act for general consumer privacy and th…
Meta Account gives users of Meta apps and devices a simpler way to access and manage their accounts. Accounts Center will automatically be updated to a Meta Account as part of a gradual rollout over t…
Suspected state-sponsored attackers are using a custom backdoor to persistently compromise Cisco security devices (firewalls), the US CISA and the UK National Cyber Security Centre warned on Thursday.…
China-linked threat actors have shifted from individually procured infrastructure to large-scale covert networks, botnets built from compromised routers and other edge devices, the National Cyber Secu…
The open web is slowly but surely filling up with “traps” designed for LLM-powered AI agents. The technique, known as indirect prompt injection (IPI), involves hiding (more or less) covert instruction…
In a decisive move that could reshape how users log in online, the National Cyber Security Centre (NCSC) is urging consumers to abandon passwords in favour of passkeys, positioning them as the future …
Microsoft is rolling out Windows Update improvements that give users more control over how updates are installed while reducing disruption from frequent or poorly timed restarts. [...]
Cybersecurity agencies in the U.S. and U.K. are warning about a custom malware called Firestarter persisting on Cisco Firepower and Secure Firewall devices running Adaptive Security Appliance (ASA) or…
Home security giant ADT has confirmed a data breach after the ShinyHunters extortion group threatened to leak stolen data unless a ransom is paid. [...]