Aggregator
CVE-2025-4664 | Google Chrome up to 136.0.7103.92 Loader Remote Code Execution (EUVD-2025-14909 / Nessus ID 236813)
CVE-2025-4770 | PHPGurukul Park Ticketing Management System 2.0 /view-normal-ticket.php viewid sql injection
CVE-2025-3536 | Tutorials-Website Employee Management System 1.0 /admin/delete-user.php ID improper authorization
CVE-2025-3537 | Tutorials-Website Employee Management System 1.0 /admin/update-user.php ID improper authorization
CVE-2025-1840 | ESAFENET CDG 5.6.3.154.205 updateorg.jsp flowId sql injection
CVE-2025-1812 | zj1983 zz up to 2024-08 SuperZ.java GetUserOrg userId sql injection
AI becomes key player in enterprise ransomware defense
Ransomware breaches continue to rise even as fewer victims pay, according to a Delinea report. 69% of organizations globally have fallen victim to ransomware, with 27% being hit more than once. While only 57% of organizations paid ransoms, down from 76% in 2024, the frequency and impact of attacks continued to grow as threat actors turned to other tactics like extortion, with 85% of ransomware victims threatened with exposure. Paying the ransom doesn’t always bring … More →
The post AI becomes key player in enterprise ransomware defense appeared first on Help Net Security.
Крупнейшая утечка данных в истории: более 4 миллиардов записей оказались в сети
CVE-2022-39151 | Siemens Parasolid/Simcenter Femap X_T File out-of-bounds write (ZDI-CAN-17736 / EUVD-2022-41696)
CVE-2024-6704 | Comments Plugin up to 7.6.21 on WordPress cross site scripting (EUVD-2024-47748)
CVE-2024-24388 | XunRuiCMS up to 4.6.2 Background Login cross site scripting (EUVD-2024-21810)
CVE-2024-4892 | BuddyPress Plugin up to 12.4.1 on WordPress cross site scripting (EUVD-2024-44460)
CVE-2024-11282 | wpchill Passster Plugin up to 4.2.10 on WordPress Password Protect Page information disclosure (EUVD-2024-34330)
CVE-2024-9531 | MultiVendorX Plugin up to 4.2.4 on WordPress authorization (EUVD-2024-49990)
AGI Playground 2025,罗永浩来了!
从「互掐」到「牵手」,小鹏华为只为这块「屏」?
BADBOX 2.0 уже у вас дома: заражение происходит до покупки, спастись почти невозможно
New infosec products of the week: June 6, 2025
Here’s a look at the most interesting products from the past week, featuring releases from Akamai, AttackIQ, Barracuda Networks, Bitdefender, Fortinet, Malwarebytes, and Varonis. Bitdefender unifies security, risk management, and compliance in a single platform Bitdefender announced GravityZone Compliance Manager, a new addition to its GravityZone platform that helps organizations reduce the burden of compliance and streamline audit readiness. The solution provides real-time visibility, automated remediation, audit-ready reports, and one-click compliance documentation fully integrated with … More →
The post New infosec products of the week: June 6, 2025 appeared first on Help Net Security.