Aggregator

A vulnerability was found in Canon Generic Plus PCL6 Printer Driver, Generic Plus UFR II Printer Driver, Generic Plus LIPS4 Printer Driver, Generic Plus LIPSLX Printer Driver and Generic Plus PS Printer Driver and classified as problematic. This affects an unknown part. Executing manipulation can lead to out-of-bounds read. This vulnerability appears as CVE-2025-7698. The attack may be performed from remote. There is no available exploit.

Google以安全为由要求验证所有Android开发者身份，并屏蔽未经验证开发者的应用侧载。第三方应用商店F-Droid反对此政策，认为其将终结开放生态系统，并呼吁用户捍卫应用自由分发。

上个月 Google 以安全的名义宣布将验证所有 Android 应用开发者的身份，从明年开始，Google 将屏蔽未经身份验证的开发者的 Android 应用的侧载（sideload）。开源自由软件 Android 应用商店 F-Droid 发表声明反对 Google 的决定。F-Droid 认为，如果这一政策强制推行，包括它在内的第三方应用商店将面临终结。Google 声称是为了安全，但过去几年它的官方应用商店 Google Play 被发现托管了大量恶意程序。它要求验证应用开发者的身份不是为了安全而是为了巩固权力，加强对曾经开放的生态系统的控制。Google 正在构建一个限制竞争和用户自由的阻塞点（choke point）。F-Droid 呼吁对此问题关心的用户向自己所在地区的议员递交反对意见，向欧盟 DMA 请愿，捍卫应用的自由分发。

Киберагентства сразу четырёх стран, не сговариваясь, забили тревогу. Времени почти не осталось.

Firezone is an open-source platform that helps organizations of any size manage secure remote access. Unlike most VPNs, it uses a least-privileged model, giving users only the access they need. Firezone was built to scale from the start, so you can add more gateways as traffic grows. It uses WireGuard, a fast and secure VPN protocol, and adds extra protections like short-lived encryption keys and firewall hole-punching to reduce the attack surface. It is also … More →

The post Firezone: Open-source platform to securely manage remote access appeared first on Help Net Security.

A newly discovered DLL hijacking vulnerability in Notepad++, the popular source code editor, could allow attackers to execute arbitrary code on a victim’s machine. Tracked as CVE-2025-56383, the flaw exists in version 8.8.3 and potentially affects all installed versions of the software, putting millions of users at risk. The vulnerability enables a local attacker to […]

The post Notepad++ DLL Hijacking Vulnerability Let Attackers Execute Malicious Code appeared first on Cyber Security News.

Dutch police arrested two 17-year-olds for spying for pro-Russian hackers; one jailed, the other placed on home bail. Dutch police arrested two 17-year-olds suspected of spying for pro-Russian hackers. One of the suspects remains in custody, while the other is released on home bail. According the NL times, the arrests followed a tip from Dutch […]

荷兰警方逮捕两名17岁青少年，涉嫌为亲俄黑客在欧盟机构附近从事间谍活动。两人通过Telegram被招募，使用Wi-Fi嗅探器收集数据。一名被捕，另一名获保释。

文章探讨了区块链技术在总统选举中的潜在应用及其对投票信任度的提升作用。通过去中心化和不可篡改的特性，区块链可以提高选举透明度和安全性，减少舞弊风险，并增强公众对选举结果的信任。

Сто тысяч рабочих мест висят на волоске, пока министры подписывают беспрецедентное соглашение.

In this Help Net Security video, Alisdair Faulkner, CEO of Darwinium, explores how the role of the CISO has changed over the past decade. Faulkner shares insights on how CISOs can communicate with the board, overcome common pitfalls such as overly technical language, and position cybersecurity as a business enabler rather than a cost center. He also examines the impact of AI as a transformative tool and a potential threat and how it is reshaping … More →

The post The CISO’s guide to stronger board communication appeared first on Help Net Security.

A vulnerability marked as critical has been reported in Linux Kernel up to 5.19.8. Impacted is the function regmap_get_spi_bus. The manipulation leads to memory corruption. This vulnerability is referenced as CVE-2022-48696. The attack needs to be initiated within the local network. No exploit is available. It is suggested to upgrade the affected component.

A vulnerability described as critical has been identified in Linux Kernel up to 4.19.259/5.4.212/5.10.142/5.15.67/5.19.8. The affected element is an unknown function of the component nvmet. The manipulation results in use after free. This vulnerability is identified as CVE-2022-48697. The attack can only be performed from the local network. There is not any exploit available. Upgrading the affected component is recommended.

A vulnerability marked as problematic has been reported in Linux Kernel up to 5.19.8. This vulnerability affects unknown code in the library lib/refcount.c of the component mpt3sas. The manipulation leads to use after free. This vulnerability is uniquely identified as CVE-2022-48695. The attack can only be initiated within the local network. No exploit exists. It is suggested to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 5.19.8. It has been rated as problematic. This issue affects the function ib_drain_sq of the component irdma. Performing manipulation results in state issue. This vulnerability is known as CVE-2022-48694. Access to the local network is required for this attack. No exploit is available. Upgrading the affected component is advised.

A vulnerability categorized as critical has been discovered in Linux Kernel up to 5.15.67/5.19.8. Impacted is an unknown function. Executing manipulation can lead to null pointer dereference. This vulnerability is handled as CVE-2022-48692. The attack can only be done within the local network. There is not any exploit available. It is advisable to upgrade the affected component.

A vulnerability identified as critical has been detected in Linux Kernel up to 4.19.257/5.4.212/5.10.142/5.15.67/5.19.8. The affected element is the function brcmstb_pm_probe of the component soc. The manipulation leads to memory leak. This vulnerability is uniquely identified as CVE-2022-48693. The attack can only be initiated within the local network. No exploit exists. You should upgrade the affected component.

A vulnerability labeled as critical has been found in Linux Kernel up to 5.19.8. This affects the function ice_vsi_cfg_rxq of the component XDP_SETUP_XSK_POOL Handler. Executing manipulation can lead to memory leak. This vulnerability is handled as CVE-2022-48690. The attack can only be done within the local network. There is not any exploit available. The affected component should be upgraded.

A vulnerability was found in Linux Kernel up to 5.10.142/5.15.67/5.19.8. It has been classified as critical. This affects the function nft_chain_release_hook of the file include/linux/slab.h. This manipulation causes memory leak. This vulnerability appears as CVE-2022-48691. The attacker needs to be present on the local network. There is no available exploit. Upgrading the affected component is recommended.

A vulnerability described as problematic has been identified in Linux Kernel up to 5.19.8. This vulnerability affects unknown code of the file net/ipv6/seg6.c of the component HMAC Data Handler. Executing manipulation can lead to out-of-bounds read. This vulnerability is tracked as CVE-2022-48687. The attack can be launched remotely. No exploit exists. Upgrading the affected component is recommended.