Aggregator

Submit #610392 / VDB-316119

Submit #610390 / VDB-316118

Submit #610389 / VDB-316117

A vulnerability classified as problematic has been found in osrg GoBGP up to 3.37.0. Affected is the function SplitRTR of the file pkg/packet/rtr/rtr.go. The manipulation leads to out-of-bounds read. This vulnerability is traded as CVE-2025-7464. It is possible to launch the attack remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

Submit #610260 / VDB-311322

Huawei will manage and store judicially authorized wiretaps in Spain, under a contract that bucks the trend of Western governments restricting use of the Chinese tech company's products and services.

Submit #610193 / VDB-316116

A vulnerability was found in Schneider Electric EcoStruxure Power Monitoring Expert and EcoStruxure Power Operation Advanced Reporting and Dashboards Module. It has been rated as problematic. This issue affects some unknown processing of the component TGML Diagram Handler. The manipulation leads to exposure of resource. The identification of this vulnerability is CVE-2025-6788. The attack may be initiated remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability was found in Tenda FH1201 1.2.0.14. It has been declared as critical. This vulnerability affects the function formWrlsafeset of the file /goform/AdvSetWrlsafeset of the component HTTP POST Request Handler. The manipulation of the argument mit_ssid leads to buffer overflow. This vulnerability was named CVE-2025-7463. The attack can be initiated remotely. Furthermore, there is an exploit available.

A vulnerability was found in Artifex GhostPDL up to 3989415a5b8e99b9d1b87cc9902bde9b7cdea145. It has been classified as problematic. This affects the function pdf_ferror of the file devices/vector/gdevpdf.c of the component New Output File Open Error Handler. The manipulation leads to null pointer dereference. This vulnerability is uniquely identified as CVE-2025-7462. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

Submit #610174 / VDB-316114

A prominent Russian basketball player has been arrested in France on charges related to one of the most extensive ransomware operations in recent years, highlighting the ongoing intersection between cybercrime and international law enforcement. Daniil Kasatkin, a 26-year-old professional basketball player who recently played for Moscow’s MBA-MAI team, was detained at Paris Charles de Gaulle […]

The post Russian Basketball Star Arrested Over Ransomware Attacks on 900+ Companies appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Submit #610173 / VDB-316113

Учёные научились управлять тем, что раньше игнорировало нас.

人脸识别技术，是基于人的脸部特征信息进行身份识别的一种生物识别技术。人脸识别技术在维护公共安全、打击犯罪等方面应用广泛，但也存在着风险。

随着人工智能技术快速发展，未成年人在网络空间的发展和保护面临各种新型问题。不知不觉间，基于生成式人工智能的各种服务，已经进入未成年人生活的方方面面。

依据《网络安全法》《个人信息保护法》等法律法规，按照《中央网信办、工业和信息化部、公安部、市场监管总局关于开展2025年个人信息保护系列专项行动的公告》要求，经国家计算机病毒应急处理中心检测，68款移动应用存在违法违规收集使用个人信息情况。

近年来，随着我国半导体产业链加速全球化布局，企业在海外发展过程中面临着日益严峻的挑战。以美国为首的西方国家通过一系列具有针对性的措施，对我国半导体产业链实施全方位限制。

为支持开展建设性对话，实现更加均衡的治理路径，我们，金砖国家领导人一致同意制定一系列指导方针，以负责任方式推动人工智能技术开发、部署和应用，助力实现可持续发展和包容性增长。

GTT Communications extended its alliance with Palo Alto Networks to include an additional managed secure access service edge (SASE) offering.

The post GTT Extends Palo Alto Networks Alliance to Add Managed SASE Service appeared first on Security Boulevard.