Aggregator

This daily article is intended to make it easier for those who want to stay updated with my regular Dark Web Informer and X/Twitter posts.

Threat Attack Daily - 18th of June 2025

Currently trending CVE - Hype Score: 23 - Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.7, from 10.1.0-M1 through 10.1.41, from 9.0.0.M1 through 9.0.105. Users are recommended to upgrade to version 11.0.8, 10.1.42 or ...

Ransomware Attack Update for the 18th of June 2025

The distinction between IAM and CIAM reflects the fundamental differences between managing internal organizational resources and serving external customers in the digital age. While both share common identity management principles, their implementation approaches, user experience requirements, and architectural considerations differ significantly.

The post Understanding IAM vs CIAM: A Comprehensive Guide to Identity Management Systems appeared first on Security Boulevard.

A vulnerability classified as problematic was found in Mozilla Thunderbird up to 115.6. Affected by this vulnerability is an unknown functionality of the component iFrame Handler. The manipulation leads to improper restriction of rendered ui layers. This vulnerability is known as CVE-2024-0747. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Mozilla Thunderbird up to 115.6. It has been rated as problematic. This issue affects some unknown processing of the component Browser Prompt Handler. The manipulation leads to an unknown weakness. The identification of this vulnerability is CVE-2024-0742. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic has been found in Mozilla Firefox up to 115.6. Affected is an unknown function of the component iFrame Handler. The manipulation leads to improper restriction of rendered ui layers. This vulnerability is traded as CVE-2024-0747. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Mozilla Firefox up to 115.6 on Linux and classified as problematic. This issue affects some unknown processing of the component Print Preview Dialog. The manipulation leads to denial of service. The identification of this vulnerability is CVE-2024-0746. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Mozilla Thunderbird up to 115.6 on Linux. It has been classified as problematic. Affected is an unknown function of the component Print Preview Dialog. The manipulation leads to denial of service. This vulnerability is traded as CVE-2024-0746. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Mozilla Firefox and classified as critical. Affected by this issue is some unknown functionality of the component ANGLE. The manipulation leads to out-of-bounds write. This vulnerability is handled as CVE-2024-0741. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Mozilla Thunderbird. It has been classified as critical. This affects an unknown part of the component ANGLE. The manipulation leads to out-of-bounds write. This vulnerability is uniquely identified as CVE-2024-0741. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Mozilla Firefox up to 115.6. It has been declared as problematic. This vulnerability affects unknown code of the component Browser Prompt Handler. The manipulation leads to an unknown weakness. This vulnerability was named CVE-2024-0742. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in GNOME file-roller up to 3.29.90 and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation with the input ./../ as part of TAR Archive leads to path traversal. This vulnerability is known as CVE-2019-16680. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in GNOME file-roller up to 3.36.1. It has been rated as critical. This issue affects some unknown processing of the file fr-archive-libarchive.c. The manipulation leads to path traversal. The identification of this vulnerability is CVE-2020-11736. An attack has to be approached locally. There is no exploit available.

A vulnerability was found in Lasso up to 2.6.x. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to improper verification of cryptographic signature. This vulnerability was named CVE-2021-28091. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Oracle Communications Unified Assurance up to 5.5.17/6.0.2. It has been declared as critical. This vulnerability affects unknown code of the component Core. The manipulation leads to an unknown weakness. This vulnerability was named CVE-2023-21830. The attack can be initiated remotely. There is no exploit available.

Shanghai Firm Bets on Open-Source Strategy, Efficiency Claims
Shanghai artificial intelligence startup MiniMax released a new open-source large language model, positioning it as a direct competitor to American and other Chinese models. MiniMax says its model performs competitively on benchmark tests against leading proprietary and open models.

Crime Gang Begins Leaking Stolen Freedman HealthCare Data
Cybercriminal gang World Leaks - formerly Hunters International - reportedly claims to have stolen 52.4 gigabytes of data containing 42,204 files from Massachusetts-based Freedman HealthCare, a contractor that provides data integration and analytics services to state health agencies.

Iranian Officials Call Internet Outages Intentional to Disrupt Israeli Operations
Iranian officials said widespread internet outages were deliberate and meant to disrupt covert Israeli operations within the country following days of missile attacks from Israel and a rapidly escalating regional conflict that experts warn could trigger major cyberattacks on critical infrastructure.