Aggregator

A vulnerability was found in Parallels Client. It has been classified as problematic. This affects an unknown part. The manipulation leads to uncontrolled search path. This vulnerability is uniquely identified as CVE-2025-6812. Local access is required to approach this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in MongoDB Server up to 8.0.9 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to resource consumption. This vulnerability is handled as CVE-2025-6712. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in MongoDB Server up to 6.0.22/7.0.19/8.0.8 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to excessive iteration. This vulnerability is known as CVE-2025-6714. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in MongoDB Server up to 6.0.21/7.0.19/8.0.6. Affected is an unknown function. The manipulation of the argument mergeCursors leads to improper authorization. This vulnerability is traded as CVE-2025-6713. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in MongoDB Server up to 6.0.20/7.0.17/8.0.4. This issue affects some unknown processing. The manipulation leads to sensitive information in log files. The identification of this vulnerability is CVE-2025-6711. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

Ridewill SRL Falls Victim to Qilin Ransomware

A vulnerability classified as critical was found in dagster-webserver Dagster up to 1.0.3. This vulnerability affects unknown code of the file /logs of the component Request Handler. The manipulation leads to path traversal. This vulnerability was named CVE-2023-51232. The attack can be initiated remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability classified as problematic has been found in UrlShortener Extension up to 1.42.6/1.43.1 on Mediawiki. This affects an unknown part. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2025-7056. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

De KLM geeft piloten ruimte om als reservist verbonden te blijven aan Defensie. Het gaat om vliegers die vanuit de luchtmacht overstapten. Die kunnen zo hun vaardigheden op bijvoorbeeld de F-35 op peil houden. Dat maakt ze snel inzetbaar voor de krijgsmacht. Staatssecretaris Gijs Tuinman en president-directeur van KLM Marjan Rintel ondertekenden hiervoor vandaag een overeenkomst op Schiphol.

Эта сеть не принадлежит никому — и в этом её сила.

Nederland en Polen willen op defensiegebied meer samenwerken. Daarom ondertekenden defensieminister Brekelmans en zijn Poolse collega Kosiniak-Kamysz een Memorandum of Understanding (MoU). Dat gebeurde vandaag in het Poolse Warschau, onder toeziend oog van de premiers Schoof en de Poolse Tusk.

Iran-aligned BladedFeline group has been observed targeting the government of Iraq and KRG with advanced malware

The dark web forum DarkForums, which has been a site for data breaches and leaks since BreachForums was shut down in mid-April, was the scene of two major leaks in late May involving Chinese cybersecurity organizations: VenusTech, a well-known IT security vendor, and Salt Typhoon, a state-sponsored advanced persistent threat (APT) organization affiliated with the […]

The post VenusTech and Salt Typhoon Breach Sheds Light on China’s Covert Cyber Mercenary Networks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Shellter Project, the vendor of a commercial AV/EDR evasion loader for penetration testing, confirmed that hackers used its Shellter Elite product in attacks after a customer leaked a copy of the software. [...]

Одна функция ядра Linux уничтожила миллиарды долларов защиты.

Elissa to spearhead Sygnia’s strategic vision to bridge cybersecurity operations with legal and insurance sectors.

The post Sygnia Expands Cyber Insurance Expertise with Global Risk and Insurance Leader Elissa Doroff  appeared first on Sygnia.

南极洲的变暖速度是世界其他地区的两倍，但过去十年南极洲周围海冰面积缩小的程度超过了气候模型的估计。发表在 PNAS 期刊上的一项研究给出了一种解释，认为可能发生了危险的反馈循环。海水因密度不同而分成不同层的现象被称为分层，其中冷淡水层位于较深较温暖和较咸的水层之上，将热量困在海洋深处，使表层海水保持较凉的状态，有助于海冰的形成。海水密度越大重量也越大。当表层海水盐度升高时，它们更容易下沉，搅动了海洋的不同层，使深层的热量上升。这种热涌在冬季也会融化海冰，使得海冰更难形成，从而形成了一个反馈循环：高盐海水将更多热量带到海洋表面，融化了更多冰，吸收了更多热，循环加剧。