Aggregator

Police have used facial recognition in Britain since 2017 and controversy has mounted as more aggressive deployments have been undertaken, including live facial recognition which involves processing real-time video footage of people passing a camera.

Russian telecommunications watchdog Roskomnadzor has blocked access to Apple's FaceTime video conferencing platform and the Snapchat instant messaging service, claiming they're being used to coordinate terrorist attacks. [...]

В ATLAS нашли подтверждение тому, что даже лёгкие частицы могут «чувствовать» поле массы.

Twin brothers with a history of cybercrimes have been arrested on charges of abusing their roles as federal contractors to delete databases storing U.S. government information.

A vulnerability was found in Linux Kernel up to 5.4.301/6.6.117/6.12.59/6.17.9. It has been rated as critical. This issue affects the function cros_ec_keyb_register_matrix. This manipulation causes improper initialization. This vulnerability is tracked as CVE-2025-40263. The attack is only possible within the local network. No exploit exists. Upgrading the affected component is advised.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 5.4.301/6.6.117/6.12.59/6.17.9. This impacts the function be_insert_vlan_in_pkt. This manipulation of the argument wrb_params causes null pointer dereference. This vulnerability is handled as CVE-2025-40264. The attack can only be done within the local network. There is not any exploit available. It is advisable to upgrade the affected component.

A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.6.117/6.12.59/6.17.9. Impacted is an unknown function. Such manipulation leads to buffer overflow. This vulnerability is listed as CVE-2025-40266. The attack must be carried out from within the local network. There is no available exploit. It is advisable to upgrade the affected component.

Alleged Sale of 3000 Credit Card Records in the United States

A hold from Sen. Rick Scott, R- Fla., over a Coast Guard contract appears to be the major reason why.

The post Sean Plankey nomination to lead CISA appears to be over after Thursday vote appeared first on CyberScoop.

A vulnerability marked as problematic has been reported in Live555 Streaming Media 2018.09.02. The affected element is the function MPEG1or2Demux::newElementaryStream of the component MPEG Handler. The manipulation leads to use after free. This vulnerability is documented as CVE-2025-65407. The attack can be initiated remotely. There is not any exploit available.

Hackers breached fintech firm Marquis, stealing personal and financial data, the security breach impacted over 780,000 people. Hackers breached fintech firm Marquis and stole personal and financial data, including names, addresses, SSNs, and card numbers, impacting over 780,000 people. Marquis is a Texas-based fintech and software firm that provides data-driven marketing, customer data platforms, analytics, […]

A vulnerability labeled as problematic has been found in Seafile Community Edition up to 13.0.11. Affected is an unknown function of the component SVG File Handler. The manipulation results in cross site scripting. This vulnerability is cataloged as CVE-2025-65516. The attack may be launched remotely. There is no exploit available. The affected component should be upgraded.

A vulnerability categorized as critical has been discovered in y_project RuoYi 4.8.0. The affected element is the function authRole of the file SysUserController.java. Such manipulation leads to improper access controls. This vulnerability is traded as CVE-2025-46175. The attack may be launched remotely. There is no exploit available.

A vulnerability classified as problematic was found in libxml2 up to 2.9.8. Affected by this vulnerability is the function xmlXPathCompOpEval of the file xpath.c. The manipulation results in null pointer dereference. This vulnerability was named CVE-2018-14404. The attack may be performed from remote. There is no available exploit. Upgrading the affected component is advised.

A vulnerability marked as critical has been reported in Sitecore Experience Manager, Experience Platform, Experience Commerce and Managed Cloud up to 10.4. Affected by this vulnerability is an unknown functionality. This manipulation causes improper authorization. This vulnerability appears as CVE-2025-34138. The attack may be initiated remotely. There is no available exploit.

A vulnerability classified as critical has been found in curl. This impacts an unknown function of the component IDN Wildcard Handler. This manipulation causes improper certificate validation. The identification of this vulnerability is CVE-2023-28321. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in curl. Affected by this vulnerability is the function siglongjmp. Performing manipulation results in race condition. This vulnerability is identified as CVE-2023-28320. The attack can be initiated remotely. There is not any exploit available. It is advisable to upgrade the affected component.

A vulnerability was found in Apple macOS up to 13.4.1. It has been declared as problematic. Affected by this issue is some unknown functionality of the component curl. Such manipulation leads to use after free. This vulnerability is documented as CVE-2023-28319. The attack needs to be performed locally. There is not any exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Apple macOS up to 13.4.1. It has been rated as problematic. This affects an unknown part of the component curl. Performing manipulation results in race condition. This vulnerability is reported as CVE-2023-28320. The attack requires a local approach. No exploit exists. Upgrading the affected component is advised.

A vulnerability classified as critical was found in curl. Affected is an unknown function of the component SSH SHA256 Fingerprint Handler. Such manipulation leads to use after free. This vulnerability is referenced as CVE-2023-28319. It is possible to launch the attack remotely. No exploit is available. Upgrading the affected component is advised.