Recent updates from Apple address a critical out-of-bounds write vulnerability affecting multiple operating systems, potentially exploited in targeted attacks.
Every 24 hours
Tech
Original briefings on what changed in security. Each story has a small illustration matched to what it covers, a short structure, and links to the catalog records and public identifiers it discusses.
Research · Aug 19, 2025
Critical Vulnerability Resolved in Linux Kernel's NFS over TLS
A significant vulnerability affecting the Linux kernel's NFS over TLS has been patched, enhancing security for users relying on TLS for data integrity.
A significant command injection vulnerability has been identified in N-able N-Central, potentially exposing systems to severe security risks.
A serious insecure deserialization vulnerability has been identified in N-able N-Central, allowing for potential local code execution.
A serious OS command injection vulnerability has been identified in Trend Micro Apex One, potentially allowing remote attackers to execute commands on affected systems.
Research · Aug 4, 2025
Critical Authorization Flaw in Dassault Systèmes DELMIA Apriso
A serious missing authorization vulnerability has been identified in Dassault Systèmes DELMIA Apriso, potentially allowing unauthorized access to sensitive application features.
Apple has released updates to address a critical buffer overflow vulnerability across various products, enhancing memory handling to prevent potential exploitation.
Research · Jul 28, 2025
Critical Update to Linux Kernel Enhances MPTCP Fallback Mechanism
A recent update to the Linux kernel addresses a significant vulnerability in the MultiPath TCP (MPTCP) implementation, improving the atomicity of fallback actions and decisions.
A severe command injection vulnerability has been discovered in tj-actions/branch-names, allowing potential exploitation through specially crafted branch names or tags.
Research · Jul 22, 2025
Linux Kernel Addresses TOCTOU Race Condition Vulnerability
A critical race condition vulnerability in the Linux kernel has been addressed, enhancing the stability and security of systems relying on this core component.
A significant SQL injection vulnerability has been identified in multiple versions of Fortinet FortiWeb, allowing unauthorized SQL command execution by unauthenticated attackers.
A serious injection vulnerability has been identified in Cisco's Identity Services Engine, potentially allowing remote attackers to gain root access without authentication.