Aggregator

In an era where cyber threats are becoming increasingly sophisticated and quantum computing looms on the horizon, traditional digital security measures must evolve. One of the most critical technologies in software trust and distribution—code signing—is undergoing a significant transformation. CodeSign Secure v3.02 is the next evolution in this domain, bringing post-quantum cryptography (PQC) to the […]

The post CodeSign Secure v3.02: Future of Code Signing with PQC appeared first on Cyber Security News.

Securing the no-code supply chain isn't just about mitigating risks — it's about enabling the business to innovate with confidence.

A vulnerability was found in COROS PACE 3 up to 3.0808.0. It has been classified as problematic. Affected is an unknown function of the component BLE Message Handler. The manipulation leads to out-of-bounds read. This vulnerability is traded as CVE-2025-48706. The attack needs to be initiated within the local network. There is no exploit available.

A vulnerability was found in COROS up to 3.0808.0 and classified as problematic. This issue affects some unknown processing of the component BLE Message Handler. The manipulation leads to null pointer dereference. The identification of this vulnerability is CVE-2025-48705. The attack needs to be done within the local network. There is no exploit available.

A vulnerability has been found in COROS PACE 3 up to 3.0808.0 and classified as problematic. This vulnerability affects unknown code of the component TLS Handshake Handler. The manipulation leads to improper certificate validation. This vulnerability was named CVE-2025-32878. The attack can be initiated remotely. There is no exploit available.

A vulnerability, which was classified as problematic, was found in COROS PACE 3 up to 3.0808.0. This affects an unknown part of the component BLE Service. The manipulation leads to information disclosure. This vulnerability is uniquely identified as CVE-2025-32879. The attack can only be done within the local network. There is no exploit available.

A vulnerability, which was classified as problematic, has been found in COROS PACE 3 up to 3.0808.0. Affected by this issue is some unknown functionality of the component BLE Legacy Pairing. The manipulation leads to predictable seed in pseudo-random number generator (prng). This vulnerability is handled as CVE-2025-32876. The attack needs to be approached within the local network. There is no exploit available.

A sophisticated new threat actor known as Mocha Manakin has emerged in the cybersecurity landscape, employing an increasingly popular social engineering technique called “paste and run” to deceive users into executing malicious scripts on their systems. This deceptive method has gained significant traction among cybercriminals due to its effectiveness in bypassing traditional security measures and […]

The post Mocha Manakin Using Paste and Run Technique to Trick Users Into Downloading Malicious Payloads appeared first on Cyber Security News.

Шифрование шифрованием, а тендер на прослушку уже запланирован.

Hoe reageer je op dreigingen op en vanaf zee? Hoe versterk je als bondgenoten de samenwerking? En hoe schrik je gezamenlijk de vijand af? Die opdrachten moesten marines uitvoeren in de 2 weken durende oefening Baltops in de Oostzee. Zr.Ms. Snellius nam deel als vlaggenschip van de Standing NATO Mine Countermeasures Group 1 (SNMCMG)1. Ook de Defensie Duikgroep gaf acte de présence. De training met totaal 9.000 militairen, 40 schepen en 25 vliegtuigen uit 17 landen eindigt vandaag. 

The UK’s Cyber Monitoring Centre (CMC) assessed the incident as a Category 2 systemic event, based on the significant economic impact

In a concerning development for internet users, cybercriminals have devised a sophisticated new technique to manipulate Google search results, effectively poisoning them to display fraudulent contact information. Unlike traditional phishing schemes that rely on fake websites, this novel approach leverages legitimate corporate websites while subtly altering displayed phone numbers, creating a nearly undetectable scam vector […]

The post Threat Actors Poisoning Google Search Results to Display The Scammer’s Phone Number Instead of Real Number appeared first on Cyber Security News.

A Krispy Kreme spokesperson said the “vast majority of those affected are Krispy Kreme employees, members of their families, and former employees.”

The digital certification system used by Russia's producers and suppliers of meat, dairy, eggs and other animal products was taken offline after a cyberattack.

The internet witnessed a new record in cyberattacks last month as Cloudflare, blocked the largest distributed denial-of-service (DDoS) attack ever recorded. The attack peaked at an astonishing 7.3 terabits per second (Tbps), overwhelming its target with 37.4 terabytes of data in just 45 seconds. The attack, detected in mid-May 2025, targeted an unnamed hosting provider […]

The post Massive DDoS Attack Hits 7.3 Tbps Delivering 37.4 Terabytes in 45 Seconds appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A vulnerability, which was classified as critical, was found in Mozilla Thunderbird up to 102.10. This affects the function DoReadData. The manipulation leads to uninitialized pointer. This vulnerability is uniquely identified as CVE-2023-32213. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic has been found in Mozilla Firefox up to 112. Affected is an unknown function of the component Address Bar Handler. The manipulation leads to clickjacking. This vulnerability is traded as CVE-2023-32212. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Mozilla Firefox up to 112. Affected by this vulnerability is the function FileReader::DoReadData. The manipulation leads to uninitialized pointer. This vulnerability is known as CVE-2023-32213. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Mozilla Firefox up to 112 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Popup Notification Handler. The manipulation leads to permission issues. This vulnerability is known as CVE-2023-32207. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Mozilla Thunderbird up to 102.10. Affected by this issue is some unknown functionality of the component Popup Notification Handler. The manipulation leads to permission issues. This vulnerability is handled as CVE-2023-32207. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.