Tag: attacks

  • Alerts: CISA Adds Two Known Exploited Vulnerabilities to Catalog

    Source URL: https://www.cisa.gov/news-events/alerts/2025/03/26/cisa-adds-two-known-exploited-vulnerabilities-catalog Source: Alerts Title: CISA Adds Two Known Exploited Vulnerabilities to Catalog Feedly Summary: CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2019-9874 Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability CVE-2019-9875 Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability These types of vulnerabilities…

  • The Register: CrushFTP CEO’s feisty response to VulnCheck’s CVE for critical make-me-admin bug

    Source URL: https://www.theregister.com/2025/03/27/crushftp_cve/ Source: The Register Title: CrushFTP CEO’s feisty response to VulnCheck’s CVE for critical make-me-admin bug Feedly Summary: Screenshot shows company head unhappy, claiming ‘real CVE is pending’ CrushFTP’s CEO is not happy with VulnCheck after the CVE numbering authority (CNA) released an unofficial ID for the critical vulnerability in its file transfer…

  • Schneier on Security: A Taxonomy of Adversarial Machine Learning Attacks and Mitigations

    Source URL: https://www.schneier.com/blog/archives/2025/03/a-taxonomy-of-adversarial-machine-learning-attacks-and-mitigations.html Source: Schneier on Security Title: A Taxonomy of Adversarial Machine Learning Attacks and Mitigations Feedly Summary: NIST just released a comprehensive taxonomy of adversarial machine learning attacks and countermeasures. AI Summary and Description: Yes Summary: The recent publication by NIST of a comprehensive taxonomy regarding adversarial machine learning attacks and corresponding countermeasures…

  • Alerts: CISA Adds Two Known Exploited Vulnerabilities to Catalog

    Source URL: https://www.cisa.gov/news-events/alerts/2025/03/26/cisa-adds-two-known-exploited-vulnerabilities-catalog Source: Alerts Title: CISA Adds Two Known Exploited Vulnerabilities to Catalog Feedly Summary: CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2019-9874 Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability CVE-2019-9875 Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability These types of vulnerabilities…

  • The Register: Files stolen from NSW court system, including restraining orders for violence

    Source URL: https://www.theregister.com/2025/03/26/nsw_police_investigating_court_system/ Source: The Register Title: Files stolen from NSW court system, including restraining orders for violence Feedly Summary: Victims’ details at risk after criminals download 9,000 files from court database Australian police are currently investigating the theft of “sensitive" data from a New South Wales court system after they confirmed approximately 9,000 files…