cyberintel.kalymoon.com · 35351 articles · updated every 4 hours · grows forever
A vulnerability identified as critical has been detected in HP Linux Imaging and Printing Software up to 3.26.3 . This vulnerability affects unknown code. The manipulation leads to heap-based buffer o…
A vulnerability labeled as problematic has been found in AWS RabbitMQ up to 0.2.0 . This issue affects some unknown processing of the file /api/aws/arn/validate . The manipulation results in active de…
A vulnerability marked as critical has been reported in Taiko AG1000-01A SMS Alert Gateway 7.3/8 . Impacted is the function validate of the component Embedded Web Configuration Interface . This manipu…
A vulnerability described as critical has been identified in Taiko AG1000-01A SMS Alert Gateway 7.3/8 . The affected element is an unknown function of the file log.shtml of the component Embedded Web …
A vulnerability classified as problematic has been found in RRWO Crypt::SaltedHash up to 0.09 on Perl. The impacted element is an unknown function. Performing a manipulation results in observable timi…
A vulnerability classified as critical was found in Frappe up to 15.104.x/16.14.x . This affects an unknown function. Executing a manipulation can lead to path traversal. This vulnerability is handled…
A vulnerability, which was classified as critical , has been found in Frappe LMS up to 2.50.0 . This impacts an unknown function of the component SCORM ZIP Package Handler . The manipulation leads to …
A vulnerability, which was classified as problematic , was found in Taiko AG1000-01A SMS Alert Gateway 7.3/8 . Affected is an unknown function of the component Embedded Web Configuration Interface . T…
A vulnerability has been found in mantisbt Mantis Bug Tracker up to 2.28.1 and classified as problematic . Affected by this vulnerability is an unknown functionality of the file bug_update_page.php of…
A vulnerability was found in nimiq core-rs-albatross up to 1.3.x and classified as problematic . Affected by this issue is the function addresses.first . Such manipulation leads to improper check for …
A vulnerability was found in nimiq core-rs-albatross up to 1.3.x . It has been classified as problematic . This affects the function Ed25519signature::from_bytes of the component Kademlia Handler . Pe…
Recent Hacks Underscore Persistent and Growing Threats to Smaller Organizations Small and mid-sized healthcare organizations - including medical specialty practices and regional clinics - continue to …
Days After Beating Musk in Court, ChatGPT Maker Moves Toward Public Debut OpenAI is preparing to confidentially file its IPO prospectus as soon as Friday, working with Goldman Sachs and Morgan Stanley…
Acquisition Focuses on Validating AI Agents, Models in Critical Security Workflows Check Point said its acquisition of AI evaluation startup Deepchecks will help validate and monitor autonomous securi…
A 23-year-old radio enthusiast spent £300 on a piece of kit from the internet, and used it to bring four packed high-speed trains to a screeching halt. His defence in court? Possibly the most creative…
A large-scale ad fraud operation called Trapdoor has been discovered targeting Android users through 455 malicious apps, quietly generating fake ad clicks and draining real advertising budgets across …
A new botnet called Void has emerged on the cybercrime underground, bringing a troubling twist to how attackers manage their operations remotely. Instead of relying on traditional servers that authori…
A new threat campaign is targeting Windows users in India by disguising malicious files as official income tax documents. Researchers have tracked the operation under the name TAX#TRIDENT, and it has …
Administrators of the Drupal open source content management platform are rushing to install an emergency patch issued today to fix a “highly critical” SQL injection vulnerability in the application’s …
Government leaders revealed that, in spite of state laws meant to improve cyber hygiene, an analysis of incidents showed issues persist and visibility falls short.
The disguised apps use WebView automation, JavaScript injection, and OTP interception to avoid detection and complete fraudulent subscriptions.
Open source software giant GitHub confirmed a data breach this week involving the theft of thousands of repos. One threat actor — TeamPCP — took credit.
There is nothing cybersecurity professionals are more excited about, and nothing they fear more, than AI.
Threat actors brute-forced VPN credentials and bypassed multi-factor authentication (MFA) on SonicWall Gen6 SSL-VPN appliances to deploy tools used in ransomware attacks. [...]