Aggregator

CNVD漏洞周报2025年第46期

CNVD漏洞平台
1 month 3 weeks ago
国家信息安全漏洞共享平台（以下简称CNVD）本周共收集、整理信息安全漏洞303个，其中高危漏洞143个、中危漏洞147个、低危漏洞13个。

Critical Apache bRPC Framework Vulnerability Let Attackers Crash the Server

Cyber Security News
1 month 3 weeks ago

A critical security vulnerability has been discovered in the Apache bRPC framework that could allow remote attackers to crash servers by sending specially crafted JSON data. The flaw, tracked as CVE-2025-59789, affects all versions of Apache bRPC before 1.15.0 across all platforms. The vulnerability exists in the json2pb component of Apache bRPC, which converts JSON data to Protocol […]

The post Critical Apache bRPC Framework Vulnerability Let Attackers Crash the Server appeared first on Cyber Security News.

Abinaya

Linux 6.18 Released With Enhanced Hardware Support, Updated Drivers and File Systems

Cyber Security News
1 month 3 weeks ago

Linus Torvalds has officially announced the release of Linux kernel 6.18 on November 30, 2025, marking another significant milestone in the open-source operating system’s development. The new kernel version brings numerous improvements across hardware support, driver updates, and file system enhancements. The Linux 6.18 release includes extensive bug fixes and driver improvements that were finalized […]

The post Linux 6.18 Released With Enhanced Hardware Support, Updated Drivers and File Systems appeared first on Cyber Security News.

Abinaya

1st December – Threat Intelligence Report

Check Point Research
1 month 3 weeks ago

For the latest discoveries in cyber research for the week of 1st December, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES OpenAI has experienced a data breach resulting from a compromise at third-party analytics provider Mixpanel, which exposed limited information of some ChatGPT API clients. The leaked data includes names, email addresses, approximate […]

The post 1st December – Threat Intelligence Report appeared first on Check Point Research.

lorenf

U.S. CISA adds an OpenPLC ScadaBR flaw to its Known Exploited Vulnerabilities catalog

Security Affairs
1 month 3 weeks ago
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds an OpenPLC ScadaBR flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added an OpenPLC ScadaBR flaw, tracked as CVE-2021-26829  (CVSS score of 5.4), to its Known Exploited Vulnerabilities (KEV) catalog. The vulnerability is a cross-site scripting (XSS) flaw that impacts Windows and Linux versions via system_settings.shtm. […]
Pierluigi Paganini

Managed ad