Aggregator

CVE-2025-43746 | Liferay Portal/DXP cross site scripting

VulDB Recent Entries
1 day 11 hours ago
A vulnerability was found in Liferay Portal and DXP. It has been rated as problematic. This vulnerability affects unknown code. The manipulation of the argument _com_Liferay_dynamic_data_mapping_web_portlet_DDMPortlet_portletNamespace/_com_Liferay_dynamic_data_mapping_web_portlet_DDMPortlet_namespace leads to cross site scripting. This vulnerability is listed as CVE-2025-43746. The attack may be initiated remotely. There is no available exploit.
vuldb.com

CVE-2025-50902 | old-peanut Open-Shop up to 1.0.0 HTTP POST Message cross-site request forgery

VulDB Recent Entries
1 day 11 hours ago
A vulnerability was found in old-peanut Open-Shop up to 1.0.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component HTTP POST Message Handler. Such manipulation leads to cross-site request forgery. This vulnerability is referenced as CVE-2025-50902. It is possible to launch the attack remotely. No exploit is available.
vuldb.com

Google Unveils Enhanced Features to Empower Defenders and Strengthen AI Security

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
1 day 11 hours ago

Google Cloud has announced a suite of advanced security enhancements at the 2025 Security Summit, aimed at fortifying AI ecosystems and leveraging artificial intelligence to elevate organizational defenses. These updates focus on proactive vulnerability detection, automated threat intelligence processing, and workload optimization for security teams. Central to the announcements is the expansion of Security Command […]

The post Google Unveils Enhanced Features to Empower Defenders and Strengthen AI Security appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Aman Mishra

The Ultimate Guide to Endpoint Security Management in 2025

Netwrix Blog | Insights for Cybersecurity and IT Pros
1 day 12 hours ago
This post first appeared on blog.netwrix.com and was written by Jeremy Moskowitz.
Endpoint security management ensures visibility, control, and protection across diverse devices in hybrid environments. It integrates policy-driven automation, patching, and conditional access to reduce risk and enforce compliance. Unified Endpoint Management and Zero Trust frameworks enable scalable, centralized defense against evolving threats and operational disruptions. Introduction to Endpoint Security Management Today, organizations operate beyond the … Continued
Jeremy Moskowitz

FBI, Cisco Warn of Russian Attacks on 7-Year-Old Flaw

darkreading
1 day 12 hours ago
In the past year, "Static Tundra," aka "Energetic Bear," has breached thousands of end-of-life Cisco devices unpatched against a 2018 flaw, in a campaign targeting enterprises and critical infrastructure.
Jai Vijayan, Contributing Writer

Phishing in 2025: Smarter Threats, Smarter Defense

Security Boulevard
1 day 12 hours ago

ManagedMethods recently hosted a webinar on one of the most pressing issues in K–12 cybersecurity: phishing. While schools have been targets for years, 2025 feels different. Attackers are evolving faster than ever, and traditional email security filters are falling behind. The upside? AI-powered defenses are emerging to give districts a fighting chance. Here’s a recap ...

The post Phishing in 2025: Smarter Threats, Smarter Defense appeared first on ManagedMethods Cybersecurity, Safety & Compliance for K-12.

The post Phishing in 2025: Smarter Threats, Smarter Defense appeared first on Security Boulevard.

Alexa Sander

Apple fixes zero-day vulnerability exploited in “extremely sophisticated attack” (CVE-2025-43300)

Help Net Security
1 day 12 hours ago

Apple has fixed yet another vulnerability (CVE-2025-43300) that has apparently been exploited as a zero-day “in an extremely sophisticated attack against specific targeted individuals.” About CVE-2025-43300 CVE-2025-43300 is an out-of-bounds write issue that could be triggered by a vulnerable device processing a malicious image file, leading to exploitable memory corruption. The vulnerability affects the Image I/O framework used by Apple’s iOS and macOS operating systems. Apple has fixed this flaw with improved bounds checking in: … More →

The post Apple fixes zero-day vulnerability exploited in “extremely sophisticated attack” (CVE-2025-43300) appeared first on Help Net Security.

Zeljka Zorz

Managed ad