cyberintel.kalymoon.com · 40491 articles · updated every 4 hours · grows forever
A vulnerability was found in SUSE Rancher up to 2.11.12/2.12.8/2.13.4/2.14.0 . It has been declared as critical . The impacted element is an unknown function in the library /var/lib/rancher/ of the co…
A vulnerability was found in inc2734 Snow Monkey Blocks Plugin up to 24.1.11 on WordPress. It has been rated as problematic . This affects an unknown function. The manipulation leads to cross site scr…
A vulnerability categorized as very critical has been discovered in SUSE Rancher up to 0.11.12/0.12.13/0.13.9/0.14.4/0.15.0 . This impacts an unknown function. The manipulation results in incorrect au…
A vulnerability identified as problematic has been detected in Hostinger Reach Plugin up to 1.3.8 on WordPress. Affected is the function handle_ajax_action . This manipulation causes missing authoriza…
A vulnerability labeled as problematic has been found in Checkmk up to 2.2.0/2.3.0p46/2.4.0p28 on Windows. Affected by this vulnerability is an unknown functionality of the component mk_mysql Agent Pl…
A vulnerability marked as problematic has been reported in SUSE openSUSE Tumbleweed . Affected by this issue is some unknown functionality of the component csync2 . Performing a manipulation results i…
A vulnerability described as critical has been identified in themefusion Avada Builder Plugin up to 3.15.1 on WordPress. This affects the function product_order . Executing a manipulation can lead to …
A vulnerability classified as problematic has been found in themefusion Avada Builder Plugin up to 3.15.2 on WordPress. This vulnerability affects the function fusion_get_svg_from_file of the componen…
A serious security flaw has been found in Exim, one of the most widely deployed mail transfer agents on the internet today. The vulnerability, tracked as EXIM-Security-2026-05-01.1, allows a remote at…
For years, texting between an iPhone and an Android phone meant your messages traveled without any real privacy protection. That long-standing gap is now being addressed, as Apple and Google have join…
A critical security flaw has been found in SandboxJS, a widely used JavaScript sandboxing library available on npm. The vulnerability allows attackers to break out of the sandbox entirely and run any …
A cyberattack campaign that tricks users into running malicious commands on their own computers has taken a dangerous new turn. The technique, known as “ClickFix,” has been circulating for some time, …
Microsoft has patched 120 vulnerabilities in this month’s security update round
UK cybersecurity sector reaches £14.7bn in revenue, driven by rapid growth in AI security firms, increased investment and rising employment across the industry
The G7 Cybersecurity Working Group releases new SBOM for AI guidance, outlining seven key data clusters to boost transparency and security across AI supply chains
Breach & Attack Simulation Tools geben Aufschluss darüber, wie gut (oder schlecht) Ihre Sicherheitskontrollen funktionieren. Roman Samborskyi | shutterstock.com Lösungen im Bereich Breach & Attack Sim…
Willkommen im neuen, KI-geschwängerten Bedrohungszeitalter. Gorodenkoff / Shutterstock Die Google Threat Intelligence Group (GTIG) warnt davor, dass kriminelle Hacker mittlerweile KI einsetzen – sowoh…
The annual CSO Awards annually recognize security projects that demonstrate outstanding security leadership and business value. For this year’s program, CSO honors 64 security organizations whose hard…
The US Cybersecurity and Infrastructure Security Agency (CISA) and its G7 cyber agency partners have released a list of minimum elements for an AI software bill of materials, a move that could help CI…
ClickFix, a one-shot social engineering technique that tricks victims into executing malicious workflows disguised as fixes to technical issues in their systems, has got a persistence upgrade. In a on…
Microsoft responded to growing competition in AI security by announcing that its new agentic security system helped researchers discover 16 new vulnerabilities in the Windows networking and authentica…
European governments and public institutions have been shifting away from proprietary software for years, and the financial infrastructure supporting open-source alternatives is growing to match. Germ…
The two chip giants have published over two dozen advisories describing recently identified security defects. The post Chipmaker Patch Tuesday: Intel and AMD Patch 70 Vulnerabilities appeared first on…
Successful exploitation of these flaws could lead to arbitrary code execution and information disclosure. The post Fortinet, Ivanti Patch Critical Vulnerabilities appeared first on SecurityWeek .