Aggregator

Submit #629810 / VDB-321213

Creator, Author and Presenter: Thomas Vissers, Tim Van hamme

Our deep appreciation to Security BSides - San Francisco and the Creators, Authors and Presenters for publishing their BSidesSF 2025 video content on YouTube. Originating from the conference’s events held at the lauded CityView / AMC Metreon - certainly a venue like no other; and via the organization's YouTube channel.

Additionally, the organization is welcoming volunteers for the BSidesSF Volunteer Force, as well as their Program Team & Operations roles. See their succinct BSidesSF 'Work With Us' page, in which, the appropriate information is to be had!

Permalink

The post BSidesSF 2025: How To Tame Your Dragon: Productionizing Agentic Apps Reliably And Securely appeared first on Security Boulevard.

Submit #628641 / VDB-321212

​Microsoft is working to resolve an Exchange Online issue causing email access problems for Outlook mobile users who use Hybrid Modern Authentication (HMA). [...]

Google 准备让 Android TV 和其它 Android 生态系统保持一致。官方博客宣布从 2026 年 8 月 1 日起，Google TV 和 Android TV 应用都需要原生支持 64 位，为即将到来的 64 位电视设备做好准备。未满足要求的应用将无法在电视设备使用的 Google Play 应用商店上架。Google 表示，这一转变将有助于提供更好的性能、更短的启动时间，为未来的硬件带来全新的体验。

Apple fixes CVE-2025-43300, a flaw letting hackers hijack devices via malicious images. Users urged to update iPhone, iPad,…

От экрана блокировки до игр — что изменилось в свежей сборке Windows 11.

提出了一种名为MScan的新型安全分析方法，能够有效检测现实世界中快速演进的微服务应用中的污点式漏洞

Как федеральный суд наказал Дэвиса Лу за его хитроумный Kill Switch?

3.800 Nederlandse krijgsgevangenen kwamen om bij de aanleg van de spoorlijnen Birma-Siam en Pakan Baroe. De slachtoffers werden vandaag herdacht op Landgoed Bronbeek. Minister Ruben Brekelmans verhaalde er onder anderen over Ed van de Logt, voor zover bekend de laatste nog levende Nederlandse dwangarbeider.

Microsoft has officially confirmed that its August 2025 security update is causing significant performance problems for users of NDI (Network Device Interface) technology. Content creators, broadcasters, and IT professionals who installed the update are reporting severe lag, stuttering, and choppy audio/video when streaming between PCs, effectively disrupting production workflows that rely on the popular IP […]

The post Microsoft Confirms August 2025 Update Causes Severe Lag in Windows 11 24H2, and Windows 10 appeared first on Cyber Security News.

A vulnerability, which was classified as problematic, was found in Linux Kernel up to 6.15.2. This vulnerability affects the function snd_usbmidi_free of the component ALSA. Executing manipulation can lead to improper initialization. This vulnerability is registered as CVE-2025-38105. The attack requires access to the local network. No exploit is available. You should upgrade the affected component.

A vulnerability marked as problematic has been reported in Linux Kernel. Affected by this issue is the function usbhid_parse. This manipulation of the argument bNumDescriptors causes out-of-bounds read. The identification of this vulnerability is CVE-2025-38103. The attack needs to be done within the local network. There is no exploit available. It is suggested to upgrade the affected component.

A vulnerability labeled as critical has been found in Linux Kernel up to 6.12.33/6.15.2. Affected by this vulnerability is the function ring_buffer_subbuf_order_set. The manipulation results in buffer overflow. This vulnerability was named CVE-2025-38101. The attack needs to be approached within the local network. There is no available exploit. The affected component should be upgraded.

A vulnerability labeled as critical has been found in Linux Kernel up to 6.15.2. This affects the function io_bitmap_exit. Executing manipulation can lead to null pointer dereference. The identification of this vulnerability is CVE-2025-38100. The attack needs to be done within the local network. There is no exploit available. The affected component should be upgraded.

A vulnerability was found in Linux Kernel up to 5.15.185/6.1.141/6.6.93/6.12.33/6.15.2. It has been rated as problematic. Affected by this vulnerability is the function vmci_host_setup_notify of the file mm/gup.c of the component VMCI. The manipulation leads to race condition. This vulnerability is traded as CVE-2025-38102. Access to the local network is required for this attack to succeed. There is no exploit available. Upgrading the affected component is advised.

A vulnerability identified as problematic has been detected in Linux Kernel up to 6.12.30/6.14.8. Affected is an unknown function of the component Bluetooth. The manipulation leads to denial of service. This vulnerability is uniquely identified as CVE-2025-38099. The attack can only be initiated within the local network. No exploit exists. You should upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.1.140/6.6.92/6.12.30/6.14.8 and classified as problematic. Impacted is the function xfrm_state of the component espintcp. The manipulation results in state issue. This vulnerability is reported as CVE-2025-38097. The attacker must have access to the local network to execute the attack. No exploit exists. It is suggested to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.12.30/6.14.8 and classified as critical. This affects the function create_validate_stream_for_sink. Such manipulation leads to null pointer dereference. This vulnerability is documented as CVE-2025-38098. The attack requires being on the local network. There is not any exploit available. It is suggested to upgrade the affected component.

A vulnerability classified as critical was found in CMS Made Simple 2.1.6. Affected is an unknown function of the component Template Handler. The manipulation of the argument cntnt01detailtemplate as part of Parameter results in code injection. This vulnerability is cataloged as CVE-2017-16783. The attack may be launched remotely. Furthermore, there is an exploit available.