A stack-based buffer overflow in ASUS router modules allows authenticated attackers within proximity to execute arbitrary code, potentially compromising network security.
Source: https://cvefeed.io/rssfeed/severity/high.atomThe ISC Stormcast podcast provides a daily summary of cybersecurity news and trends, offering insights into the latest threats and vulnerabilities.
Source: https://isc.sans.edu/rssfeed_full.xmlA critical flaw in Atlassian software affects eight enterprise products, creating a significant security risk for organizations relying on these tools.
Source: https://www.csoonline.com/feed/A cyberattack on Arizona's Court System resulted in the theft of personal information for over 1 million people, with data dating back 30 years, raising concerns about privacy and identity theft.
Source: https://www.securityweek.com/feed/A privilege escalation vulnerability in Octopus Server allows authenticated users with role modification permissions to bypass security protections, potentially leading to unauthorized access.
Source: https://cvefeed.io/rssfeed/latest.atomA vulnerability in IBM Langflow OSS allows remote authenticated attackers to execute arbitrary code due to improper access controls.
Source: https://cvefeed.io/rssfeed/latest.atomThe Silentransomgroup has targeted Andersen Group, adding them to their list of ransomware victims, highlighting the persistent threat of ransomware to businesses.
Source: https://www.ransomware.live/rss.xmlA command injection vulnerability in OpenSSH allows attackers to exploit improperly handled special characters in usernames.
Source: https://cvefeed.io/rssfeed/latest.atomA local denial-of-service vulnerability in `sssd-kcm` allows attackers to exploit excessive memory preallocation via the UNIX socket.
Source: https://cvefeed.io/rssfeed/latest.atomA vulnerability in Gitea's push mirror API improperly validates local file system paths, potentially allowing unauthorized access.
Source: https://cvefeed.io/rssfeed/latest.atomNVIDIA Model-Optimizer contains an insecure deserialization vulnerability, potentially allowing attackers to execute malicious code.
Source: https://cvefeed.io/rssfeed/latest.atomNVIDIA TensorRT is affected by an out-of-bounds read vulnerability, which could allow attackers to access sensitive memory.
Source: https://cvefeed.io/rssfeed/latest.atomBackstage's TechDocs plugin contains a vulnerability that allows improper validation of MkDocs theme configurations, potentially leading to exploitation.
Source: https://cvefeed.io/rssfeed/latest.atomA heap buffer overflow in HDF5 allows remote attackers to exploit crafted metadata to cause application crashes or execute arbitrary code.
Source: https://cvefeed.io/rssfeed/severity/high.atomVexy ransomware has targeted Kookabarra Juice, a French juice manufacturer, threatening to leak sensitive corporate data.
Source: https://www.ransomware.live/rss.xmlTwo vulnerabilities in AWS's Bedrock AgentCore Starter Toolkit allow for code injection and SSRF attacks, potentially compromising cloud environments.
Source: https://aws.amazon.com/security/security-bulletins/feed/Threat actors are evolving 'ClickFix' attacks by using DNS TXT records and browser cache pre-fetching to hide malicious payloads, complicating early detection efforts.
Source: https://www.darkreading.com/rss.xmlQilin ransomware has targeted BNYH, with details about the attack and data leak yet to be disclosed.
Source: https://www.ransomware.live/rss.xmlA proposed change to California's wiretapping law could limit private lawsuits over internet tracking, sparking debates between privacy advocates and businesses.
Source: https://cyberscoop.com/feedA path traversal vulnerability (CVE-2026-101153) in CloudVision Portal could allow authenticated users to access unauthorized files, posing a risk to sensitive data.
Source: https://cvefeed.io/rssfeed/latest.atomLoading dashboard...