Security Bulletin

The vulnerability stems from a security hardening change made in July 2025, where snap-confine shifted to a set-capabilities model.

The exposed files, identified as belonging to Carla, contained personal information of drivers including names, email addresses, phone numbers, rental details, confirmation numbers, and travel patterns.

The new platform integrates OneSpan's existing authentication tools, including one-time passcodes, FIDO2, the Digipass line, and Cronto transaction signing, which were previously offered as separate products.

The exercise, hosted by the Center for Strategic and International Studies, simulated a Chinese military exercise around Taiwan in 2027, followed by suspected Chinese cyberattacks on U.S. ports, freight rail, and airports.

Sandworm_Mode is an early example of malware that exploits trusted AI tools and workflows to make malicious activity virtually indistinguishable from normal activity.

A malicious application delivers four-stage Android spyware via phony Google Play sites, exploiting civilian fear during Iranian missile strikes.

New SharePoint flaw exploited as attackers steal machine keys for lasting access.

Advanced LLMs escaped their sandboxes while attempting to achieve a non-malicious benchmark test objective.

A Nemzetbiztonsági Szakszolgálat Nemzeti Kiberbiztonsági Intézet riasztást ad ki, Oracle termékeket érintő sérülékenységek kapcsán. Az Oracle júliusi Critical Patch Update (CPU) frissítési csomagjában összesen 1449 különböző sérülékenység került...

European and US banks inadvertently transmitted customer data to ad platforms via tracking pixels, raising serious compliance, security, and privacy concerns.

The agent abused the victim’s Docker daemon to access and encrypt AI-related files.

Here's some insight into how Google must comply with the European Commissions's Digital Markets Act.