Aggregator

越南因生物识别规则关闭数百万银行账号

不安全
8 months 3 weeks ago
自2025年9月1日起，越南银行将关闭不活跃或不符合新生物识别规则的账户，约8600万个账户面临风险。同时实施严格交易门槛：超过1000万越南盾的在线转账需面部认证，日累计超2000万越南盾需生物识别认证。新政策旨在打击欺诈和身份盗窃，主要影响外国居民和外籍客户。

CVE-2024-52616 | Avahi DNS Transaction ID initialization (EUVD-2024-46029 / Nessus ID 212344)

Vuldb Updates
8 months 3 weeks ago
A vulnerability, which was classified as problematic, has been found in Avahi. The impacted element is an unknown function of the component DNS Transaction ID Handler. Performing manipulation results in improper initialization. This vulnerability is cataloged as CVE-2024-52616. The attack must originate from the local network. There is no exploit available. To fix this issue, it is recommended to deploy a patch.
vuldb.com

VDB-325686 | Amazon AWS Bedrock Model access control

VulDB Recent Entries
8 months 3 weeks ago
A vulnerability has been found in Amazon AWS and classified as critical. This affects an unknown function of the component Bedrock Model Handler. The manipulation leads to improper access controls. Remote exploitation of the attack is possible. No exploit is available. This product is available as a managed service. Users are not able to maintain vulnerability countermeasures themselves.
vuldb.com

Lynx

Dark Feed IO
8 months 3 weeks ago

You must login to view this content

cohenido

Building a stronger SOC through AI augmentation

Help Net Security
8 months 3 weeks ago

In this Help Net Security interview, Tim Bramble, Director of Threat Detection and Response at OpenText, discusses how SOC teams are gaining value from AI in detecting and prioritizing threats. By learning what “normal” looks like across users and systems, AI helps surface anomalies that rules-based methods often miss. Bramble explains that the greatest value comes from human-AI collaboration, with automation providing insights and analysts applying the judgment and context needed for action. Where exactly … More →

The post Building a stronger SOC through AI augmentation appeared first on Help Net Security.

Mirko Zorz

CVE-2025-10894 | nx devkit backdoor

VulDB Recent Entries
8 months 3 weeks ago
A vulnerability, which was classified as critical, was found in nx. The impacted element is an unknown function of the component devkit. Executing manipulation can lead to backdoor. The identification of this vulnerability is CVE-2025-10894. The attack may be launched remotely. There is no exploit available.
vuldb.com

CVE-2025-9353 | Themify Builder Plugin up to 7.6.9 on WordPress several cross site scripting

VulDB Recent Entries
8 months 3 weeks ago
A vulnerability, which was classified as problematic, has been found in Themify Builder Plugin up to 7.6.9 on WordPress. The affected element is an unknown function. Performing manipulation of the argument several results in cross site scripting. This vulnerability was named CVE-2025-9353. The attack may be initiated remotely. There is no available exploit.
vuldb.com

CVE-2025-9054 | MultiLoca Plugin up to 4.2.8 on WordPress Setting wcmlim_settings_ajax_handler authorization

VulDB Recent Entries
8 months 3 weeks ago
A vulnerability classified as critical was found in MultiLoca Plugin up to 4.2.8 on WordPress. Impacted is the function wcmlim_settings_ajax_handler of the component Setting Handler. Such manipulation leads to missing authorization. This vulnerability is uniquely identified as CVE-2025-9054. The attack can be launched remotely. No exploit exists.
vuldb.com

CVE-2025-56146 | Indian Bank IndSMART Android App 3.8.1 on Android NuWebViewActivity certificate validation

VulDB Recent Entries
8 months 3 weeks ago
A vulnerability classified as critical has been found in Indian Bank IndSMART Android App 3.8.1 on Android. This issue affects some unknown processing of the component NuWebViewActivity. This manipulation causes improper certificate validation. This vulnerability is handled as CVE-2025-56146. The attack can be initiated remotely. There is not any exploit available.
vuldb.com

Managed ad