Aggregator

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday placed a security flaw impacting the Linux kernel in its Known Exploited Vulnerabilities (KEV) catalog, stating it has been actively exploited in the wild. The vulnerability, CVE-2023-0386 (CVSS score: 7.8), is an improper ownership bug in the Linux kernel that could be exploited to escalate privileges on susceptible

После уязвимости админам придётся доказывать, что они не причастны.

Activities which organisations must carry out to migrate safely to post-quantum cryptography in the coming years.

Dashlane introduced AI phishing alerts, an advancement to the Dashlane Omnix platform that protects enterprises and users against threats targeting user credentials. Trained by Dashlane on both legitimate and phishing sources, the new innovation detects and alerts users to phishing risks the moment they visit a suspicious website, while giving admins the insights to secure employees against phishing domains. AI has made it even easier for threat actors to continually evolve their tactics to evade … More →

The post Dashlane’s AI model alerts businesses to phishing risks appeared first on Help Net Security.

Kusari unveiled Kusari Inspector, an AI-based pull request security tool that brings cutting-edge security risk analysis directly into developers’ daily workflows. In Kusari Inspector, Kusari has brought together a powerful combination of industry standards, AI, and dependency graph analysis, to help organizations detect software supply chain risks early during the pull request process, and address them before code integration. The tool finds security weaknesses and supply chain risks in order to maintain secure development throughout … More →

The post Kusari Inspector improves supply chain security appeared first on Help Net Security.

A vulnerability was found in langgenius dify 1.2.0. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to cross site scripting. This vulnerability was named CVE-2025-49149. The attack can be initiated remotely. There is no exploit available.

A vulnerability was found in Fuji Electric Smart Editor up to 1.0.1.0. It has been classified as critical. This affects an unknown part. The manipulation leads to out-of-bounds write. This vulnerability is uniquely identified as CVE-2025-41413. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability was found in Fuji Electric Smart Editor up to 1.0.1.0 and classified as critical. Affected by this issue is some unknown functionality. The manipulation leads to stack-based buffer overflow. This vulnerability is handled as CVE-2025-41388. The attack may be launched remotely. There is no exploit available.

A vulnerability has been found in Fuji Electric Smart Editor up to 1.0.1.0 and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to out-of-bounds read. This vulnerability is known as CVE-2025-32412. The attack can be launched remotely. There is no exploit available.

近年来，一款名为“银狐木马”（又称“游蛇”）的恶意程序在国内及亚太地区悄然肆虐。

A vulnerability, which was classified as critical, was found in Trend Micro Internet Security 8/10/11.0/12.00 Build 1244/17.0.1224. Affected is an unknown function. The manipulation leads to windows shortcut following. This vulnerability is traded as CVE-2025-49384. An attack has to be approached locally. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in Fortra Core Privileged Access Manager up to 7.2.0.17/8.1.0.22/8.1.1.7/9.0.0.1 on Linux. This issue affects some unknown processing of the component BoKS Server Agent. The manipulation leads to use of cache containing sensitive information. The identification of this vulnerability is CVE-2025-5141. The attack needs to be approached locally. There is no exploit available.

A vulnerability classified as problematic was found in portainer Community Edition up to 2.27.6/2.30.x. This vulnerability affects unknown code. The manipulation leads to information disclosure. This vulnerability was named CVE-2025-49593. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in SeaCMS 12.9. This affects an unknown part of the file admin_datarelate.php. The manipulation leads to sql injection. This vulnerability is uniquely identified as CVE-2024-40570. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability was found in KAON KCM3100 up to 1.4.2. It has been declared as very critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to authentication bypass using alternate channel. This vulnerability is known as CVE-2025-51381. The attack can be launched remotely. There is no exploit available.

A vulnerability was found in NVIDIA NVDebug Tool 1.6.0. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to internal asset exposed to unsafe debug access level or state. This vulnerability is handled as CVE-2025-23252. The attack may be launched remotely. There is no exploit available.

A vulnerability was found in conda-forge conda-smithy up to 3.47.0 and classified as critical. This issue affects the function travis_headers of the component Configuration File Handler. The manipulation leads to incorrect default permissions. The identification of this vulnerability is CVE-2025-49843. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in ggml-org llama.cpp. It has been classified as critical. Affected is the function llama_vocab::impl::token_to_piece of the file llama.cpp/src/vocab.cpp. The manipulation leads to memory corruption. This vulnerability is traded as CVE-2025-49847. It is possible to launch the attack remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

As applications become more distributed, traditional monitoring and security tools are failing to keep pace. This article explores how eBPF, when utilized by the graduated CNCF Cilium and its sub-project Tetragon, combined with Software Bills of Materials (SBOMs), can provide insights and a security feedback loop for modern systems. We’ll create a container image and its SBOM. We’ll then launch it, simulate a breach, and see how our eBPF-based setup with Tetragon captures the issue. … More →

The post Kernel-level container insights: Utilizing eBPF with Cilium, Tetragon, and SBOMs for security appeared first on Help Net Security.