Aggregator

Новая волна изменений упрощает генераторы, Pin и работу с ядром.

A vulnerability was found in GNU Coreutils 7.2. It has been classified as critical. This affects an unknown part of the component Key Specification. The manipulation leads to heap-based buffer overflow. This vulnerability is uniquely identified as CVE-2025-5278. The attack can only be initiated within the local network. There is no exploit available.

Alleged Data for Sale of an Unidentified Organisation in Japan

A vulnerability was found in Samsung Mobile Processor 1480/2400 and classified as problematic. Affected by this issue is some unknown functionality of the component GPU. The manipulation leads to denial of service. This vulnerability is handled as CVE-2024-49196. The attack can only be done within the local network. There is no exploit available.

A vulnerability has been found in Samsung Mobile Processor, Wearable Processor and Modem Exynos up to 9110 and classified as critical. Affected by this vulnerability is an unknown functionality of the component GPRS Protocol Handler. The manipulation leads to out-of-bounds write. This vulnerability is known as CVE-2025-22377. The attack needs to be approached within the local network. There is no exploit available.

A vulnerability, which was classified as problematic, was found in Samsung Mobile Processor, Wearable Processor and Modem Exynos up to 1480. Affected is an unknown function of the component Wi-Fi. The manipulation leads to out-of-bounds read. This vulnerability is traded as CVE-2024-49197. Access to the local network is required for this attack to succeed. There is no exploit available.

A vulnerability, which was classified as critical, has been found in NVIDIA CUDA Toolkit. This issue affects some unknown processing of the component ELF File Parser. The manipulation leads to improper handling of length parameter inconsistency. The identification of this vulnerability is CVE-2025-23247. The attack may be initiated remotely. There is no exploit available.

The attack dirsupted MathWorks' systems and online applications, but it remains unclear which ransomware group targeted the software company and whether they stole any data.

The city filed breach notification letters with regulators seven months after a ransomware gang accessed systems.

Новая технология избавит тяжелых пациентов от таблеток и страданий.

12 башен, 384 сердца: новая жизнь больших моделей по-китайски.

Грядёт языковая революция во фреймворке.

Watch this On Demand Webinar and gain critical insights, actionable strategies and learn how Unit 42 can help you stay ahead in 2025 and beyond.

via the cosmic humor & dry-as-the-desert wit of Randall Munroe, creator of XKCD

Permalink

The post Randall Munroe’s XKCD ‘Drafting’ appeared first on Security Boulevard.

The non-ransomware extortion group has switched up tactics and victimology in a deliberate and focused campaign similar to those of other attackers focused on stealing sensitive data.

PQC PDQ: Researchers find we’ll need 20 times fewer qubits to break conventional encryption than previously believed.

The post RSA and Bitcoin at BIG Risk from Quantum Compute appeared first on Security Boulevard.

According to police in Guangzhou, the group — allegedly linked to Taiwan’s ruling Democratic Progressive Party (DPP) — has targeted more than 1,000 key networks in over 10 Chinese provinces.