Aggregator

Вайб-кодинг или троян — выбор за пользователем.

Unauthenticated command injection vulnerabilities (CVE-2025-54948, CVE-2025-54987) affecting the on-premise version of Trend Micro’s Apex One endpoint security platform are being probed by attackers, the company has warned on Wednesday. Unfortunately for those organizations that use it, a patch is still in the works and is expected to be released around the middle of August 2025. But the company has provided a “fix tool” that mitigates the risk of exploitation in the short term – though … More →

The post Trend Micro Apex One flaws exploted in the wild (CVE-2025-54948, CVE-2025-54987) appeared first on Help Net Security.

Security researchers have identified a sophisticated new tactic employed by Akira ransomware operators, who are exploiting legitimate Windows drivers to evade antivirus and endpoint detection systems while targeting SonicWall VPN infrastructure. This development represents a significant escalation in the group’s technical capabilities and poses serious challenges for enterprise cybersecurity defenses. Campaign Overview and Timeline From […]

The post Akira Ransomware Uses Windows Drivers to Bypass AV/EDR in SonicWall Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A sophisticated evasion technique employed by Akira ransomware affiliates, exploiting legitimate Windows drivers to bypass antivirus and endpoint detection and response (EDR) systems during recent SonicWall VPN attack campaigns.  The attacks, which have escalated from late July through early August 2025, demonstrate the threat actors’ evolving tactics to maintain persistence and avoid detection in compromised […]

The post Akira Ransomware Uses Windows Drivers to Bypass AV/EDR in SonicWall Attacks appeared first on Cyber Security News.

A vulnerability was found in Emby MediaBrowser 4.9.0.35 and classified as problematic. This issue affects some unknown processing. The manipulation leads to unverified password change. The identification of this vulnerability is CVE-2025-46389. The attack may be initiated remotely. There is no exploit available.

A vulnerability has been found in Emby MediaBrowser 4.9.0.35 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to information disclosure. This vulnerability was named CVE-2025-46388. The attack can be initiated remotely. There is no exploit available.

A vulnerability, which was classified as critical, was found in Emby MediaBrowser 4.9.0.35. This affects an unknown part. The manipulation leads to authorization bypass. This vulnerability is uniquely identified as CVE-2025-46387. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability classified as problematic was found in Emby MediaBrowser 4.9.0.35. Affected by this vulnerability is an unknown functionality. The manipulation leads to observable response discrepancy. This vulnerability is known as CVE-2025-46390. The attack can be launched remotely. There is no exploit available.

A vulnerability, which was classified as critical, has been found in Emby MediaBrowser 4.9.0.35. Affected by this issue is some unknown functionality. The manipulation leads to improper access controls. This vulnerability is handled as CVE-2025-46391. The attack may be launched remotely. There is no exploit available.

A vulnerability classified as problematic has been found in Elgato Key Light, Key Light Air, Key Light Mini, Key Light Neo, Ring Light, Light Strip and Light Strip Pro up to 1.0.3(218). Affected is an unknown function. The manipulation leads to cross-site request forgery. This vulnerability is traded as CVE-2025-7202. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability was found in Emby MediaBrowser 4.9.0.35. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to authorization bypass. The identification of this vulnerability is CVE-2025-46386. The attack may be initiated remotely. There is no exploit available.

A vulnerability was found in TechPowerUp ThrottleStop 3.0.0.0. It has been declared as critical. This vulnerability affects the function MmMapIoSpace in the library ThrottleStop.sys of the component IOCTL Interface. The manipulation leads to exposed ioctl with insufficient access control. This vulnerability was named CVE-2025-7771. The attack needs to be approached locally. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in SATO CL4-6NX Plus and CL4-6NX-J Plus. It has been classified as critical. This affects an unknown part. The manipulation leads to os command injection. This vulnerability is uniquely identified as CVE-2025-22469. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in SATO CL4-6NX Plus and CL4-6NX-J Plus and classified as critical. Affected by this issue is some unknown functionality of the component Lua Script Handler. The manipulation leads to unrestricted upload. This vulnerability is handled as CVE-2025-22470. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in HashiCorp Vault and Vault Enterprise up to 1.20.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component LDAP Auth Method Handler. The manipulation leads to improper neutralization of whitespace. This vulnerability is known as CVE-2025-6013. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

Пользователь входит по отпечатку, а кто-то другой — по уязвимости.

Descope launched Agentic Identity Control Plane, a solution that enables security teams to institute policy-based governance, auditing, and identity management for their AI agent and Model Context Protocol (MCP) ecosystems. The Agentic Identity Control Plane builds on top of the existing Descope Agentic Identity Hub to mark a huge step forward in Descope’s vision of becoming the identity provider for AI agents. As AI agents, LLMs, and MCP servers continue gaining rapid adoption, security leaders … More →

The post Descope enhances AI identity security with Agentic Identity Control Plane appeared first on Help Net Security.

关键词网络攻击2025年7月发生的这场针对Bing搜索引擎的精密投毒攻击，堪称数字化时代的"特洛伊木马"现代版

关键词安全漏洞网络安全研究人员近日确认，Trend Micro Apex One（本地版）管理控制台存在两个至

关键词网咯攻击网络安全公司Proofpoint近期披露了一项持续进行的攻击活动，黑客通过伪造知名企业的微软OA