#Sharepoint #ToolShell attacks targeted orgs across four continents
BleepingComputer
Sharepoint ToolShell attacks targeted orgs across four continents
Hackers believed to be associated with China have leveraged the ToolShell vulnerability (CVE-2025-53770) in Microsoft SharePoint in attacks targeti...
 #cybersecurity
#TikTok Won’t Say If It’s Giving #ICE Your Data https://www.forbes.com/sites/emilybaker-white/2025/10/21/tiktok-wont-say-if-its-giving-ice-your-data/ #privacy #politics #SocialMedia
#VidarStealer 2.0 adds multi-threaded data theft, better evasion
BleepingComputer
Vidar Stealer 2.0 adds multi-threaded data theft, better evasion
The operators of Vidar Stealer, one of the most successful malware-as-a-service (MaaS) operations of the past decade, have released a new major ver...
 #cybersecurity #malware #Vidar
#TPLink warns of critical command injection flaw in #Omada gateways
BleepingComputer
TP-Link warns of critical command injection flaw in Omada gateways
TP-Link has made firmware updates available for a broad range of Omada gateway models to address four vulnerabilities, among which a critical pre-a...
 #cybersecurity
Navigating the Digital Markets Act, Digital Services Act and the Online Safety Act
Navigating the Digital Markets Act, Digital Services Act and the Online Safety Act | F-Droid - Free and Open Source Android App Repository
Introduction In our previous article, we explored how Free and Open Source Software (FOSS) projects like F-Droid handle legal requests for user or ...
 #FDroid #privacy #politics #UK #EU #DMA #OSA #AgeVerification
#CISA confirms hackers exploited #Oracle #EBusiness Suite #SSRF flaw
BleepingComputer
CISA confirms hackers exploited Oracle E-Business Suite SSRF flaw
CISA has confirmed that an Oracle E-Business Suite flaw tracked as CVE-2025-61884 is being exploited in attacks, adding it to its Known Exploited V...
 #cybersecurity
#Cursor, #Windsurf IDEs riddled with 94+ n-day #Chromium vulnerabilities
BleepingComputer
Cursor, Windsurf IDEs riddled with 94+ n-day Chromium vulnerabilities
The latest releases of Cursor and Windsurf integrated development environments are vulnerable to more than 94 known and patched security issues in ...
 #cybersecurity #AI
It’s Time to #TakeBackCTRL
Electronic Frontier Foundation
It’s Time to Take Back CTRL
Tyrants are co-opting tech to supercharge the attack on democracy. They’re making it easier to spy on people, block free speech, and control what...
 #privacy #politics #tech
Hackers exploit 34 zero-days on first day of #Pwn2Own #Ireland
BleepingComputer
Hackers exploit 34 zero-days on first day of Pwn2Own Ireland
On the first day of Pwn2Own Ireland 2025, security researchers exploited 34 unique zero-days and collected $522,500 in cash awards.
 #cybersecurity
Unseeable prompt injections in screenshots: more vulnerabilities in #Comet and other #AI browsers
Brave
Unseeable prompt injections in screenshots: more vulnerabilities in Comet and other AI browsers | Brave
AI browsers remain vulnerable to prompt injection attacks via screenshots and hidden content, allowing attackers to exploit users' authenticated se...
 #cybersecurity #LLM #PromptInjection #AIBrowser