*** GMail and Validation-Mails *** There seems to be an issue that Gmail is not accepting mails from my server. The reason is that I am currently rebuilding my server infrastructure and the MX-entries are not correctly set. I have activated the accounts using a Gmail-address manually. If you do not receive the validation mail, drop me a note to k.e.klingner@gmail.com.
Im Rahmen des PCC-Bug-Bounty-Programms, das seit 2024 Sicherheitsexperten offensteht, kam es zu einem erfolgreichen Angriff. Telemetrie-Daten konnten abfließen.
heise online
CERT.PL said this appears to be the first instance of a private APN being used as an attack vector. The post Novel Private APN Pivot Let Hackers Sabotage Second Polish Energy Facility appeared first on SecurityWeek.
SecurityWeek
Ein wirksames Löschkonzept sollte sowohl die Anforderungen der DSGVO als auch die der ISO 27001 erfüllen. Dieser Beitrag zeigt, wie Datenschutzbeauftragte und Informationssicherheitsbeauftragte gemeinsam ein normkonform…
Dr. Datenschutz
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that hackers are exploiting a critical-severity Progress Kemp LoadMaster command injection vulnerability. [...]
BleepingComputer
The critical-severity flaw allows unauthenticated, remote attackers to execute arbitrary commands. The post CISA Urges Immediate Patching of Exploited Progress LoadMaster Vulnerability appeared first on SecurityWeek.
SecurityWeek
The hack is the first known Australian case of the emerging risk from a new generation of AI agents capable of such autonomous shenanigans.
Cybernews
Critical flaws have been found in the Connective Signing Extension, a browser component used by more than 2 million people in Belgium to access electronic identity cards and Maestro payment cards. The now-patched issues…
CyberSecurityNews
Payroll Pirates are using phishing emails to seize Microsoft 365 sessions and search payroll-related mailboxes. The campaign turns a voicemail alert into a route for financial fraud, even when multi-factor authenticatio…
CyberSecurityNews
Using social engineering, a threat actor accessed the computers of three employees and exfiltrated data from them. The post Corporate Data Stolen in Levi Strauss Cyberattack appeared first on SecurityWeek.
SecurityWeek
A vulnerability classified as problematic has been found in ECOVACS ROBOTICS ECOVACS PRO App up to 1.3.81. This vulnerability affects unknown code. This manipulation causes improper certificate validation. The identific…
vuldb
A vulnerability described as problematic has been identified in Samsung SmartThings. This affects an unknown part. The manipulation results in improper access controls. This vulnerability was named CVE-2026-21084. The a…
vuldb
A vulnerability marked as very critical has been reported in ECOVACS ROBOTICS DEEBOT PRO M1 and DEEBOT PRO K1VAC. Affected by this issue is some unknown functionality of the component Telnet Service. The manipulation le…
vuldb
A vulnerability labeled as problematic has been found in ECOVACS ROBOTICS DEEBOT PRO M1 and DEEBOT PRO K1VAC. Affected by this vulnerability is an unknown functionality of the component Web Server. Executing a manipulat…
vuldb
A vulnerability identified as problematic has been detected in Samsung Smart Switch 3.7.64.10/3.7.66.6/3.7.67.2/3.7.68.6/3.7.69.15. Affected is an unknown function. Performing a manipulation results in improper input va…
vuldb
A vulnerability categorized as problematic has been discovered in ECOVACS ROBOTICS DEEBOT PRO M1 and DEEBOT PRO K1VAC. This impacts an unknown function. Such manipulation leads to improper certificate validation. This v…
vuldb
A vulnerability was found in Ecovacs Robotics DEEBOT PRO M1 and DEEBOT PRO K1VAC. It has been rated as very critical. This affects an unknown function. This manipulation causes weak password requirements. This vulnerabi…
vuldb
A vulnerability was found in ECOVACS ROBOTICS DEEBOT PRO M1 and DEEBOT PRO K1VAC. It has been declared as critical. The impacted element is an unknown function of the component Wi-Fi Hotspot. The manipulation results in…
vuldb
A vulnerability was found in ECOVACS ROBOTICS DEEBOT PRO M1 and DEEBOT PRO K1VAC. It has been classified as very critical. The affected element is an unknown function. The manipulation leads to channel accessible by non…
vuldb
A vulnerability was found in Ecovacs Robotics DEEBOT PRO M1 and DEEBOT PRO K1VAC and classified as problematic. Impacted is an unknown function. Executing a manipulation can lead to improper certificate validation. This…
vuldb
A vulnerability has been found in ECOVACS ROBOTICS DEEBOT PRO M1 and DEEBOT PRO K1VAC and classified as critical. This issue affects some unknown processing of the component Websocket. Performing a manipulation results …
vuldb
Microsoft hat durch seinen Streit mit Chaotic Eclipse einen Pwnie Award gewonnen. Annehmen wollte ihn wohl keiner - aus Angst vor Jobverlust. (Sicherheitslücke, Microsoft)
GOLEM
AI giveth, work taketh.
Cybernews
A vulnerability, which was classified as problematic, was found in Samsung Devices. This vulnerability affects unknown code of the component AppLock. Such manipulation leads to improper export of android application com…
vuldb
A vulnerability, which was classified as problematic, has been found in Samsung Health up to 6.x. This affects an unknown part. This manipulation causes relative path traversal. This vulnerability is tracked as CVE-2026…
vuldb
A vulnerability classified as problematic was found in Samsung Health up to 6.30.5.105. Affected by this issue is some unknown functionality. The manipulation results in incorrect authorization. This vulnerability is id…
vuldb
A vulnerability classified as problematic has been found in Samsung Health up to 6.0.x. Affected by this vulnerability is an unknown functionality. The manipulation leads to incorrect authorization. This vulnerability i…
vuldb
A vulnerability described as very critical has been identified in Samsung Bixby. Affected is an unknown function. Executing a manipulation can lead to incorrect default permissions. The identification of this vulnerabil…
vuldb
A vulnerability marked as very critical has been reported in Samsung Devices. This impacts an unknown function. Performing a manipulation results in improper input validation. This vulnerability was named CVE-2026-21073…
vuldb
A vulnerability labeled as problematic has been found in Samsung Devices 2026. This affects an unknown function of the file libsavsvc.so of the component VC1 codec. Such manipulation leads to improper input validation. …
vuldb
A vulnerability identified as very critical has been detected in Samsung Devices. The impacted element is an unknown function of the file libsavsvc.so of the component MPEG4 codec. This manipulation causes improper inpu…
vuldb
A vulnerability categorized as problematic has been discovered in Samsung Devices. The affected element is an unknown function of the component Samsung Message. The manipulation results in improper input validation. Thi…
vuldb
A vulnerability was found in Samsung Devices. It has been rated as problematic. Impacted is an unknown function of the file libsavsvc.so of the component VC1 codec. The manipulation leads to incorrect conversion between…
vuldb
A newly observed malware campaign is using simple Windows scripts to open the door to remote control and data theft. The chain relies on Visual Basic Script, or VBS, and PowerShell, two tools present on business compute…
CyberSecurityNews
A vulnerability was found in Samsung Devices. It has been declared as problematic. This issue affects some unknown processing of the file libril_sem.so. Executing a manipulation can lead to stack-based buffer overflow. …
vuldb
A vulnerability was found in Samsung Devices. It has been classified as very critical. This vulnerability affects unknown code of the file libsmsd.so. Performing a manipulation results in improper input validation. This…
vuldb
A vulnerability was found in Samsung Devices and classified as very critical. This affects an unknown part of the file libcodec2_sec_flacdec.so of the component Flac Decoder. Such manipulation leads to improper input va…
vuldb
A vulnerability has been found in Samsung Devices and classified as very critical. Affected by this issue is some unknown functionality of the file libcodec2secqcelpdec.so. This manipulation causes improper input valida…
vuldb
A vulnerability, which was classified as critical, was found in Samsung Devices. Affected by this vulnerability is an unknown functionality. The manipulation results in improper access controls. This vulnerability is ca…
vuldb
A vulnerability, which was classified as problematic, has been found in Samsung Smart Switch 3.7.64.10/3.7.66.6/3.7.67.2/3.7.68.6/3.7.69.15. Affected is an unknown function. The manipulation leads to cleartext storage o…
vuldb
A vulnerability classified as problematic was found in Samsung Smart Switch. This impacts an unknown function of the component Trouble Scanning Mode. Executing a manipulation can lead to insufficient verification of dat…
vuldb
A vulnerability classified as problematic has been found in Samsung My Galaxy up to 6.2. This affects an unknown function. Performing a manipulation results in improper authorization in handler for custom url scheme. Th…
vuldb
A vulnerability described as problematic has been identified in Samsung SamsungPassAutofill. The impacted element is an unknown function. Such manipulation leads to improper export of android application components. Thi…
vuldb
A vulnerability marked as problematic has been reported in Samsung Smart Switch 3.7.64.10/3.7.66.6/3.7.67.2/3.7.68.6/3.7.69.15. The affected element is an unknown function. This manipulation causes missing encryption of…
vuldb
Exposed details may include highly sensitive export-controlled technical info.
Cybernews
RovoBlast is a one-click prompt-injection vulnerability in Atlassian Rovo that could allow attackers to exfiltrate sensitive enterprise data from Jira, Confluence, SharePoint, and other connected services. Atlassian add…
CyberSecurityNews
Ein lokaler Angreifer kann eine Schwachstelle in Sophos Endpoint für macOS ausnutzen, um seine Privilegien zu erhöhen, und um beliebigen Programmcode mit Administratorrechten auszuführen.
BSI CERT Security Advisory
A few years ago, staying connected while travelling usually meant choosing between your home carrier's roaming service and buying a...
Cybernews
A vulnerability labeled as problematic has been found in Samsung Devices. Impacted is an unknown function of the component SemClipboardService. The manipulation results in improper authorization in handler for custom ur…
vuldb
A vulnerability identified as problematic has been detected in Samsung Devices. This issue affects some unknown processing. The manipulation leads to improper input validation. This vulnerability is uniquely identified …
vuldb
A vulnerability categorized as problematic has been discovered in Samsung Devices. This vulnerability affects unknown code of the component Contacts. Executing a manipulation can lead to improper export of android appli…
vuldb
A vulnerability was found in Samsung Devices. It has been rated as problematic. This affects an unknown part. Performing a manipulation results in improper input validation. This vulnerability is known as CVE-2026-21058…
vuldb
A vulnerability was found in Cybozu Garoon up to 6.17.1. It has been declared as problematic. Affected by this issue is some unknown functionality. Such manipulation leads to cross site scripting. This vulnerability is …
vuldb
A vulnerability was found in Nishishi Factory Tegalog up to 4.8.4. It has been classified as critical. Affected by this vulnerability is an unknown functionality. This manipulation causes incorrect regular expression. T…
vuldb
A vulnerability was found in Samsung Devices and classified as problematic. Affected is an unknown function of the component Samsung Dialer. The manipulation results in improper input validation. This vulnerability is r…
vuldb
Claude Code activity on a macOS developer machine has raised a difficult security question: when does convenient automation become a serious exposure? A new Elastic investigation found a session that opened reverse tunn…
CyberSecurityNews
Angreifer nutzen zurzeit eine kritische Sicherheitslücke in der Business-Intelligence-Plattform Metabase aus. Admins müssen jetzt handeln.
heise online
Cybersecurity researchers have flagged a malicious Microsoft Visual Studio Code (VS Code) extension named Solidity Pro ("solidity-pro") that has been observed delivering a browser wallet and credential stealer. The name…
The Hacker News
A vulnerability has been found in Apache IoTDB and classified as problematic. This impacts an unknown function of the component RPC Service. The manipulation leads to improper input validation. This vulnerability is doc…
vuldb
A vulnerability, which was classified as problematic, was found in keras-team Keras up to 3.15.0. This affects the function H5IOStore.__getitem__ of the file keras/src/saving/saving_lib.py of the component H5IOStore. Ex…
vuldb
Europe is supercharging IRIS² with 66 more satellites for secure connectivity.
Cybernews