Aggregator

SitusAMC confirms data breach affecting customer information

Security Affairs
6 months 3 weeks ago
SitusAMC says a recent breach exposed customer data; the real-estate financing firm provides back-office services for banks and lenders. SitusAMC, a leading real-estate financing services provider for banks and lenders, disclosed a data breach discovered earlier this month that exposed customer information. The firm manages back-office functions such as mortgage origination, servicing, and compliance for […]
Pierluigi Paganini

HashiCorp Vault Vulnerability Allow Attackers to Authenticate to Vault Without Valid Credentials

Cyber Security News
6 months 3 weeks ago

A critical security flaw has been discovered in HashiCorp’s Vault Terraform Provider that could allow attackers to bypass authentication and access Vault without valid credentials. The vulnerability, tracked as CVE-2025-13357, affects organizations using LDAP authentication with Vault. The security issue stems from an incorrect default configuration in Vault’s Terraform Provider. Specifically, the provider set the deny_null_bind parameter […]

The post HashiCorp Vault Vulnerability Allow Attackers to Authenticate to Vault Without Valid Credentials appeared first on Cyber Security News.

Abinaya

AutoBackdoor：通过大语言模型代理实现自动化后门攻击

Seebug Paper
6 months 3 weeks ago
作者：Yige Li, Zhe Li, Wei Zhao, Nay Myat Min, Hanxun Huang, Xingjun Ma, Jun Sun 译者：知道创宇404实验室翻译组 原文链接：https://arxiv.org/html/2511.16709v1 摘要 后门攻击对大型语言模型（LLMs）的安全部署构成严重威胁，攻击者可通过该攻击植入由特定输入触发的隐藏行为。然而，现有...

NSFOCUS Receives International Recognition: 2025 Global Competitive Strategy Leadership for AI-Driven Security Operation

Security Boulevard
6 months 3 weeks ago

SANTA CLARA, Calif., Nov 25, 2025 – Recently, NSFOCUS Generative Pre-trained Transformer (NSFGPT) and Intelligent Security Operations Platform (NSFOCUS ISOP) were recognized by the internationally renowned consulting firm Frost & Sullivan and won the 2025 Global Competitive Strategy Leadership for AI-Driven Security Operation [1]. Frost & Sullivan Best Practices Recognition awards companies each year in […]

The post NSFOCUS Receives International Recognition: 2025 Global Competitive Strategy Leadership for AI-Driven Security Operation appeared first on NSFOCUS, Inc., a global network and cyber security leader, protects enterprises and carriers from advanced cyber attacks..

The post NSFOCUS Receives International Recognition: 2025 Global Competitive Strategy Leadership for AI-Driven Security Operation appeared first on Security Boulevard.

NSFOCUS

美国人延长了手机使用寿命

Solidot
6 months 3 weeks ago
Heather Mitchell 手中的一部 Galaxy A71 智能手机已使用了六年之久，过去 26 年她一共使用了 5 部手机，每部都用到不能用为止。根据 Reviews.org 的调查，美国人每部智能手机的平均使用寿命从 2016 年的 22 个月延长到了今天的 29 个月。延长设备使用寿命在短期内可能省钱，但长期看可能损害经济。美联储发表的一项研究称，企业每推迟一年升级设备，生产率就会下降约0.33%。

CVE-2025-59485 | Intercom Security Point of MaLion up to 5.3.3 on Windows DLL File Parser uncontrolled search path (EUVD-2025-199589)

VulDB Recent Entries
6 months 3 weeks ago
A vulnerability, which was classified as problematic, has been found in Intercom Security Point of MaLion up to 5.3.3 on Windows. Impacted is an unknown function of the component DLL File Parser. This manipulation causes uncontrolled search path. This vulnerability is handled as CVE-2025-59485. It is possible to launch the attack on the local host. There is not any exploit available. It is advisable to upgrade the affected component.
vuldb.com

CVE-2025-64693 | Intercom Security Point of MaLion prior 7.1.1.9 on Windows Request heap-based overflow (EUVD-2025-199587)

VulDB Recent Entries
6 months 3 weeks ago
A vulnerability classified as critical was found in Intercom Security Point of MaLion and Security Point of MaLionCloud on Windows. This issue affects some unknown processing of the component Request Handler. The manipulation results in heap-based buffer overflow. This vulnerability is known as CVE-2025-64693. It is possible to launch the attack remotely. No exploit is available. Upgrading the affected component is advised.
vuldb.com

Managed ad