Aggregator

Descope Gets $35M for AI Agent Identity Controls, Governance

Ransomware DataBreachToday.com
8 months 2 weeks ago
Identity Security Vendor to Expand AI Governance Tools Including MCP Server Defense
Descope raised $35 million to expand its agentic identity hub and MCP authorization capabilities. As enterprises adopt AI, CISOs demand granular governance, auditing and secure identity frameworks for nonhuman agents. Descope aims to lead this emerging space.

Breach Roundup: FTC Sues Sendit Over Kid's Data Collection

Ransomware DataBreachToday.com
8 months 2 weeks ago
Also, Cyberattack Disrupts Asahi’s Japan Operations, Halts Production
This week, FTC sued Sendit, another Harrods breach, Allianz data breach and a cyberattack disrupted Asahi's Japan operations. WestJet disclosed data theft. Hackers targeted Kido Nursery chain, a VMware privilege escalation flaw was exploited as zero-day, DarkCloud infostealer resurfaced.

CVE-2025-2905 | WSO2 API Manager up to 2.0.0 XML Parser xml external entity reference

Vuldb Updates
8 months 2 weeks ago
A vulnerability has been found in WSO2 API Manager up to 2.0.0 and classified as problematic. This vulnerability affects unknown code of the component XML Parser. This manipulation causes xml external entity reference. This vulnerability only affects products that are no longer supported by the maintainer. This vulnerability is tracked as CVE-2025-2905. The attack is possible to be carried out remotely. No exploit exists.
vuldb.com

CVE-2025-25014 | Elastic Kibana up to 8.17.5/8.18.0/9.0.0 Machine Learning/Reporting prototype pollution

Vuldb Updates
8 months 2 weeks ago
A vulnerability described as critical has been identified in Elastic Kibana up to 8.17.5/8.18.0/9.0.0. This vulnerability affects unknown code of the component Machine Learning/Reporting. The manipulation results in improperly controlled modification of object prototype attributes ('prototype pollution'). This vulnerability is reported as CVE-2025-25014. The attack can be launched remotely. No exploit exists. Upgrading the affected component is recommended.
vuldb.com

Hacker Stole Sensitive Data From FEMA, Border Patrol: Reports

Security Boulevard
8 months 2 weeks ago

An assessment by DHS found that hackers were able to access FEMA servers by exploiting the CitrixBleed 2 vulnerability and steal data from both that agency and the border patrol office, contradicting an earlier statement by Homeland Security Secretary Kristi Noem that no personal information was taken during the weeks-long breach.

The post Hacker Stole Sensitive Data From FEMA, Border Patrol: Reports appeared first on Security Boulevard.

Jeffrey Burt

Lynx

Dark Feed IO
8 months 2 weeks ago

You must login to view this content

cohenido

Top 10 Best Brand Protection Solutions for Enterprises in 2025

Cyber Security News
8 months 2 weeks ago

Brand protection solutions are essential for enterprises in 2025 as digital commerce continues to grow and online threats evolve more rapidly than ever. With the surge in counterfeit products, trademark infringements, phishing attacks, and reputation risks, enterprises must safeguard their intellectual property and digital assets. Choosing the right brand protection tool not only builds consumer […]

The post Top 10 Best Brand Protection Solutions for Enterprises in 2025 appeared first on Cyber Security News.

Cyber Advisory

CVE-2025-61588 | risc0 RISC Zero up to 2.0.x sys_read code injection (GHSA-jqq4-c7wq-36h7 / EUVD-2025-32056)

Vuldb Updates
8 months 2 weeks ago
A vulnerability has been found in risc0 RISC Zero up to 2.0.x and classified as critical. Affected by this issue is the function sys_read. Performing manipulation results in code injection. This vulnerability is cataloged as CVE-2025-61588. It is possible to initiate the attack remotely. There is no exploit available. The affected component should be upgraded.
vuldb.com

CVE-2025-61583 | joni1802 ts3-manager up to 2.2.1 Web Interface cross site scripting (GHSA-qw6j-37r6-m93g / EUVD-2025-32058)

Vuldb Updates
8 months 2 weeks ago
A vulnerability was found in joni1802 ts3-manager up to 2.2.1. It has been rated as problematic. This affects an unknown function of the component Web Interface. Performing manipulation results in cross site scripting. This vulnerability is reported as CVE-2025-61583. The attack is possible to be carried out remotely. No exploit exists. Upgrading the affected component is advised.
vuldb.com

CVE-2025-56380 | Frappe Framework 15.72.4 API Endpoint frappe.client.get_value fieldname sql injection (EUVD-2025-32134)

Vuldb Updates
8 months 2 weeks ago
A vulnerability classified as critical has been found in Frappe Framework 15.72.4. Affected by this issue is the function frappe.client.get_value of the component API Endpoint. Performing manipulation of the argument fieldname results in sql injection. This vulnerability is known as CVE-2025-56380. Remote exploitation of the attack is possible. No exploit is available.
vuldb.com

CVE-2025-61096 | PHPGurukul Online Shopping Portal Project 2.1 /shopping/login.php fullname sql injection (EUVD-2025-32143)

Vuldb Updates
8 months 2 weeks ago
A vulnerability identified as critical has been detected in PHPGurukul Online Shopping Portal Project 2.1. This affects an unknown function of the file /shopping/login.php. The manipulation of the argument fullname leads to sql injection. This vulnerability is documented as CVE-2025-61096. The attack can be initiated remotely. There is not any exploit available.
vuldb.com

CVE-2025-56381 | Frappe ERPNext 15.67.0 frappe.desk.reportview.get order_by/group_by sql injection (EUVD-2025-32133)

Vuldb Updates
8 months 2 weeks ago
A vulnerability described as critical has been identified in Frappe ERPNext 15.67.0. This vulnerability affects unknown code of the file /api/method/frappe.desk.reportview.get. Executing manipulation of the argument order_by/group_by can lead to sql injection. This vulnerability appears as CVE-2025-56381. The attack may be performed from remote. There is no available exploit.
vuldb.com

Managed ad