Aggregator

Chrome sandbox escape nets security researcher $250,000 reward

Security Affairs
3 weeks ago
Researcher earns Google Chrome ’s top $250K bounty for a sandbox escape vulnerability enabling remote code execution. A researcher who goes online with the moniker ‘Micky’ earned $250,000 from Google for reporting a high-severity Chrome vulnerability. The flaw, tracked as CVE-2025-4609, resides in the Mojo IPC system, an attacker can exploit the flaw to escape […]
Pierluigi Paganini

New TETRA Radio Encryption Flaws Expose Law Enforcement Communications

The Hackers News
3 weeks ago
Cybersecurity researchers have discovered a fresh set of security issues in the Terrestrial Trunked Radio (TETRA) communications protocol, including in its proprietary end-to-end encryption (E2EE) mechanism that exposes the system to replay and brute-force attacks, and even decrypt encrypted traffic. Details of the vulnerabilities – dubbed 2TETRA:2BURST – were presented at the Black Hat USA
The Hacker News

Erlang/OTP SSH RCE Vulnerability Actively Exploited to Target OT Networks

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
3 weeks ago

A severe vulnerability, designated CVE-2025-32433 with a CVSS score of 10.0, has been identified in the Secure Shell (SSH) daemon of the Erlang programming language’s Open Telecom Platform (OTP). This flaw permits unauthenticated remote code execution (RCE) by allowing attackers to send SSH connection protocol messages with codes greater than or equal to 80 to […]

The post Erlang/OTP SSH RCE Vulnerability Actively Exploited to Target OT Networks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Aman Mishra

Managed ad