🚨 EUVD-2025-5223

📊 Score: n/a
📦 Product: Linux, Linux, Linux (+18 more)
🏢 Vendor: Linux
📅 Published: 2025-02-27 | Updated: 2026-05-23

📝 In the Linux kernel, the following vulnerability has been resolved:

bpf: Send signals asynchronously if !preemptible

BPF programs can execute in all kinds of contexts and when a program
running in a non-preemptible context uses ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-5223

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2025-5234

📊 Score: 7.8/10 (CVSS v3.1)
📦 Product: Linux, Linux, Linux (+17 more)
🏢 Vendor: Linux
📅 Published: 2025-02-27 | Updated: 2026-05-23

📝 In the Linux kernel, the following vulnerability has been resolved:

padata: avoid UAF for reorder_work

Although the previous patch can avoid ps and ps UAF for _do_serial, it
can not avoid potential UAF issue for r...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-5234

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2025-5220

📊 Score: n/a
📦 Product: Linux, Linux, Linux (+11 more)
🏢 Vendor: Linux
📅 Published: 2025-02-27 | Updated: 2026-05-23

📝 In the Linux kernel, the following vulnerability has been resolved:

smb: client: fix oops due to unset link speed

It isn't guaranteed that NETWORK_INTERFACE_INFO::LinkSpeed will always
be set by the server, so the client must ha...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-5220

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2025-5225

📊 Score: 7.8/10 (CVSS v3.1)
📦 Product: Linux, Linux, Linux (+27 more)
🏢 Vendor: Linux
📅 Published: 2025-02-27 | Updated: 2026-05-23

📝 In the Linux kernel, the following vulnerability has been resolved:

net: davicom: fix UAF in dm9000_drv_remove

dm is netdev private data and it cannot be
used after free_netdev() call. Using dm after free_netdev()...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-5225

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2025-5182

📊 Score: n/a
📦 Product: Linux, Linux, Linux (+27 more)
🏢 Vendor: Linux
📅 Published: 2025-02-27 | Updated: 2026-05-23

📝 In the Linux kernel, the following vulnerability has been resolved:

HID: multitouch: Add NULL check in mt_input_configured

devm_kasprintf() can return a NULL pointer on failure,but this
returned value in mt_input_configured() is...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-5182

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2025-5212

📊 Score: n/a
📦 Product: Linux, Linux, Linux (+31 more)
🏢 Vendor: Linux
📅 Published: 2025-02-27 | Updated: 2026-05-23

📝 In the Linux kernel, the following vulnerability has been resolved:

printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX

Shifting 1 << 31 on a 32-bit int causes signed integer overflow, which
leads to undefined beha...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-5212

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2025-5203

📊 Score: n/a
📦 Product: Linux, Linux, Linux (+21 more)
🏢 Vendor: Linux
📅 Published: 2025-02-27 | Updated: 2026-05-23

📝 In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc

A NULL sock pointer is passed into l2cap_sock_alloc() when it is called
from l2cap_sock_new_conne...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-5203

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2025-5209

📊 Score: n/a
📦 Product: Linux, Linux, Linux (+7 more)
🏢 Vendor: Linux
📅 Published: 2025-02-27 | Updated: 2026-05-23

📝 In the Linux kernel, the following vulnerability has been resolved:

KEYS: trusted: dcp: fix improper sg use with CONFIG_VMAP_STACK=y

With vmalloc stack addresses enabled (CONFIG_VMAP_STACK=y) DCP trusted
keys can crash during en-...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-5209

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2025-5236

📊 Score: n/a
📦 Product: Linux, Linux, Linux (+10 more)
🏢 Vendor: Linux
📅 Published: 2025-02-27 | Updated: 2026-05-23

📝 In the Linux kernel, the following vulnerability has been resolved:

firmware: qcom: scm: smc: Handle missing SCM device

Commit ca61d6836e6f ("firmware: qcom: scm: fix a NULL-pointer
dereference") makes it explicit that qcom_scm_...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-5236

#cybersecurity #infosec #euvd #cve #vulnerability

Discord now enables default end-to-end encryption for voice and video across DMs, group calls, channels and Go Live streams using the open-source DAVE protocol. 🔐
Externally audited encryption keeps keys on user devices, while unsupported clients are blocked and text messages remain server-accessible. 🛡️

🔗 https://cybersecuritynews.com/discord-end-to-end-encryption-default/

#TechNews #Discord #E2EE #Encryption #DAVE #OpenSource #Privacy #Cybersecurity #WebRTC #FOSS #Security #Linux #Gaming #Mozilla #GitHub #Audit #Games #Game

Oura confirmed user health data is not end-to-end encrypted, allowing staff and governments with legal demands to access records stored on company servers. 💍
The wearable maker says requests are infrequent but still has not published transparency reports showing how often user data is shared with authorities. 🔍

🔗 https://this.weekinsecurity.com/oura-says-it-gets-government-demands-for-user-data-will-it-share-how-many/

#TechNews #Oura #Privacy #Encryption #Wearables #HealthTech #Cybersecurity #Surveillance #DataProtection #Security #FOSS #Tech #Transparency #Cloud #Tracking

WhatsApp is testing “After reading” disappearing messages on iOS, letting users delete chats 5 minutes, 1 hour or 2 hours after they are opened. 📱
Unread messages auto-delete after 24 hours, but screenshots and external captures can still bypass retention limits despite added privacy controls. 🔒

🔗 https://in.mashable.com/tech/109890/whatsapp-testing-new-self-destruct-messages-feature-on-iphone-all-you-need-to-know

#TechNews #WhatsApp #Apple #iPhone #iOS #Android #Privacy #Encryption #Signal #Telegram #Cybersecurity #Messaging #Security #FOSS #Mobile #Meta #Tech #Instagram

Researchers disclosed CVE-2026-46333, a Linux kernel flaw present since 2016 that enables local users to access sensitive files and execute commands as root. 🐧
Qualys said Debian, Fedora and Ubuntu default installs are affected, while admins are urged to patch kernels and rotate exposed SSH keys. 🔑

🔗 https://thehackernews.com/2026/05/9-year-old-linux-kernel-flaw-enables.html

#TechNews #Linux #Kernel #CVE202646333 #CVE #Cybersecurity #Qualys #Ubuntu #Debian #Fedora #OpenSource #FOSS #Security #Exploit #Infosec #SysAdmin #Privacy #SSH #Admin

Switzerland’s federal government is evaluating open-source alternatives to proprietary software to reduce foreign tech dependence and strengthen digital sovereignty. 🇨🇭
The 2023 LMETA law requires publicly funded code to be published by default, while pilots explore Linux-based workspaces for federal staff. 🐧

🔗 https://interoperable-europe.ec.europa.eu/collection/open-source-observatory-osor/news/switzerland-eyes-open-source-alternatives-proprietary-software

#TechNews #Switzerland #OpenSource #DigitalSovereignty #Linux #FOSS #Privacy #Cybersecurity #Government #Interoperability #Transparency #EU #Europe #Tech #OSS

🚨 EUVD-2024-24122

📊 Score: n/a
📦 Product: Linux, Linux, Linux (+13 more)
🏢 Vendor: Linux
📅 Published: 2024-04-17 | Updated: 2026-05-23

📝 In the Linux kernel, the following vulnerability has been resolved:

dm-integrity: fix a memory leak when rechecking the data

Memory for the "checksums" pointer will leak if the data is rechecked
after checksum failure (because...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-24122

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2024-24120

📊 Score: n/a
📦 Product: Linux, Linux, Linux (+9 more)
🏢 Vendor: Linux
📅 Published: 2024-04-17 | Updated: 2026-05-23

📝 In the Linux kernel, the following vulnerability has been resolved:

net/mlx5e: Use a memory barrier to enforce PTP WQ xmit submission tracking occurs after populating the metadata_map

Just simply reordering the functions mlx5e_...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-24120

#cybersecurity #infosec #euvd #cve #vulnerability

iOS 26.5 won’t let users downgrade to prior update any longer

Apple shipped iOS 26.5 to all users last week, and now in the last 24 hours, the company has stopped signing iOS 26.4.2—thus preventing downgrades to a prior update. more…

https://9to5mac.com/2026/05/20/ios-26-5-wont-let-users-downgrade-to-prior-update-any-longer/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #9to5Mac [9to5Mac]

🚨 EUVD-2024-24188

📊 Score: n/a
📦 Product: Linux, Linux, Linux (+19 more)
🏢 Vendor: Linux
📅 Published: 2024-04-24 | Updated: 2026-05-23

📝 In the Linux kernel, the following vulnerability has been resolved:

binder: check offset alignment in binder_get_object()

Commit 6d98eb95b450 ("binder: avoid potential data leakage when copying
txn") introduced changes to how ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-24188

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2024-24187

📊 Score: n/a
📦 Product: Linux, Linux, Linux (+22 more)
🏢 Vendor: Linux
📅 Published: 2024-04-24 | Updated: 2026-05-23

📝 In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path

The commit mutex should not be released during the critical section
between nft_gc_se...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-24187

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2024-24342

📊 Score: n/a
📦 Product: Linux, Linux, Linux (+8 more)
🏢 Vendor: Linux
📅 Published: 2024-05-01 | Updated: 2026-05-23

📝 In the Linux kernel, the following vulnerability has been resolved:

btrfs: fix race when detecting delalloc ranges during fiemap

For fiemap we recently stopped locking the target extent range for the
whole duration of the fiema...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-24342

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2024-24337

📊 Score: n/a
📦 Product: Linux, Linux, Linux (+25 more)
🏢 Vendor: Linux
📅 Published: 2024-05-01 | Updated: 2026-05-23

📝 In the Linux kernel, the following vulnerability has been resolved:

media: dvb-frontends: avoid stack overflow warnings with clang

A previous patch worked around a KASAN issue in stv0367, now a similar
problem showed up with c...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-24337

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2024-24329

📊 Score: n/a
📦 Product: Linux, Linux, Linux (+8 more)
🏢 Vendor: Linux
📅 Published: 2024-05-01 | Updated: 2026-05-23

📝 In the Linux kernel, the following vulnerability has been resolved:

xen/evtchn: avoid WARN() when unbinding an event channel

When unbinding a user event channel, the related handler might be
called a last time in case the kerne...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-24329

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2024-24327

📊 Score: n/a
📦 Product: Linux, Linux, Linux (+18 more)
🏢 Vendor: Linux
📅 Published: 2024-05-01 | Updated: 2026-05-23

📝 In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: do not compare internal table flags on updates

Restore skipping transaction if table update does not modify flags.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-24327

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2024-24326

📊 Score: n/a
📦 Product: Linux, Linux, Linux (+9 more)
🏢 Vendor: Linux
📅 Published: 2024-05-01 | Updated: 2026-05-23

📝 In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: Fix a memory leak in nf_tables_updchain

If nft_netdev_register_hooks() fails, the memory associated with
nft_stats is not freed, causing ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-24326

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2024-24294

📊 Score: 6.3/10 (CVSS v3.1)
📦 Product: Linux, Linux, Linux (+20 more)
🏢 Vendor: Linux
📅 Published: 2024-05-01 | Updated: 2026-05-23

📝 In the Linux kernel, the following vulnerability has been resolved:

f2fs: fix to avoid potential panic during recovery

During recovery, if FAULT_BLOCK is on, it is possible that
f2fs_reserve_new_block() will ret...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-24294

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2024-24286

📊 Score: n/a
📦 Product: Linux, Linux, Linux (+23 more)
🏢 Vendor: Linux
📅 Published: 2024-05-01 | Updated: 2026-05-23

📝 In the Linux kernel, the following vulnerability has been resolved:

net/rds: fix WARNING in rds_conn_connect_if_down

If connection isn't established yet, get_mr() will fail, trigger connection after
get_mr().

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-24286

#cybersecurity #infosec #euvd #cve #vulnerability

I waited years for Googlebooks — but I wish I hadn’t

Googlebooks: Chromebooks in disguise.

https://www.androidauthority.com/waited-years-for-googlebooks-wish-i-hadnt-3668388/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #AndroidAuthority [Android Authority]

🚨 EUVD-2024-24604

📊 Score: n/a
📦 Product: Linux, Linux, Linux (+13 more)
🏢 Vendor: Linux
📅 Published: 2024-05-13 | Updated: 2026-05-23

📝 In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: once more fix the call oder in amdgpu_ttm_move() v2

This reverts drm/amdgpu: fix ftrace event amdgpu_bo_move always move
on same heap. The basic p...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-24604

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2024-24602

📊 Score: n/a
📦 Product: Linux, Linux, Linux (+24 more)
🏢 Vendor: Linux
📅 Published: 2024-05-13 | Updated: 2026-05-23

📝 In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout

When the sco connection is established and then, the sco socket
is releasing, timeout_work will ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-24602

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2024-24600

📊 Score: n/a
📦 Product: Linux, Linux, Linux (+19 more)
🏢 Vendor: Linux
📅 Published: 2024-05-09 | Updated: 2026-05-23

📝 In the Linux kernel, the following vulnerability has been resolved:

net: gtp: Fix Use-After-Free in gtp_dellink

Since call_rcu, which is called in the hlist_for_each_entry_rcu traversal
of gtp_dellink, is not part of the RCU r...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-24600

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2023-57278

📊 Score: n/a
📦 Product: Linux, Linux, Linux (+18 more)
🏢 Vendor: Linux
📅 Published: 2024-05-09 | Updated: 2026-05-23

📝 In the Linux kernel, the following vulnerability has been resolved:

io_uring/af_unix: disable sending io_uring over sockets

File reference cycles have caused lots of problems for io_uring
in the past, and it still doesn't work...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-57278

#cybersecurity #infosec #euvd #cve #vulnerability

Beyond Tax Returns: How Shared Malware Infrastructure Scales Brand Abuse In Indonesia

Pulse ID: 6a1283fdc1060edd372d8d40
Pulse Link: https://otx.alienvault.com/pulse/6a1283fdc1060edd372d8d40
Pulse Author: Tr1sa111
Created: 2026-05-24 04:52:13

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #Indonesia #InfoSec #Malware #OTX #OpenThreatExchange #bot #Tr1sa111

Infostealer Campaign Using Trading App as Lure

Pulse ID: 6a1283f6b11ffefd4047a7b3
Pulse Link: https://otx.alienvault.com/pulse/6a1283f6b11ffefd4047a7b3
Pulse Author: Tr1sa111
Created: 2026-05-24 04:52:06

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #InfoSec #InfoStealer #OTX #OpenThreatExchange #bot #Tr1sa111

The Evolution of ClickFix: From Cleartext to Server Side Polymorphism

Pulse ID: 6a1283eeea5b0c771537ec61
Pulse Link: https://otx.alienvault.com/pulse/6a1283eeea5b0c771537ec61
Pulse Author: Tr1sa111
Created: 2026-05-24 04:51:58

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #InfoSec #OTX #OpenThreatExchange #bot #Tr1sa111

Middle East Malicious Infrastructure Report: 1,350+ C2 Servers Mapped Across 98 Providers

Pulse ID: 6a1284753738220e8af91251
Pulse Link: https://otx.alienvault.com/pulse/6a1284753738220e8af91251
Pulse Author: Tr1sa111
Created: 2026-05-24 04:54:13

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #InfoSec #MiddleEast #OTX #OpenThreatExchange #bot #Tr1sa111

One Man, One AI, One Fake Persona: Inside the 5-Year Influence and Fraud 'Patriot Bait' Campaign

Pulse ID: 6a12846d21f34b9ba3f761b0
Pulse Link: https://otx.alienvault.com/pulse/6a12846d21f34b9ba3f761b0
Pulse Author: Tr1sa111
Created: 2026-05-24 04:54:05

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #InfoSec #IoT #OTX #OpenThreatExchange #bot #Tr1sa111

The Gentleman Ransomware | Defense Evasion TTPs Uncovered

Pulse ID: 6a128467a298b168d33ca3df
Pulse Link: https://otx.alienvault.com/pulse/6a128467a298b168d33ca3df
Pulse Author: Tr1sa111
Created: 2026-05-24 04:53:59

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #InfoSec #OTX #OpenThreatExchange #RansomWare #bot #Tr1sa111

Cybercriminal VPN Dismantled in Crackdown

Pulse ID: 6a1284618e6b192b0a99b9a7
Pulse Link: https://otx.alienvault.com/pulse/6a1284618e6b192b0a99b9a7
Pulse Author: Tr1sa111
Created: 2026-05-24 04:53:53

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #InfoSec #OTX #OpenThreatExchange #VPN #bot #Tr1sa111

PureLogs: Delivery via PawsRunner Steganography

Pulse ID: 6a12845778deef28f0ac5fc3
Pulse Link: https://otx.alienvault.com/pulse/6a12845778deef28f0ac5fc3
Pulse Author: Tr1sa111
Created: 2026-05-24 04:53:43

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#AWS #CyberSecurity #InfoSec #OTX #OpenThreatExchange #Steganography #bot #Tr1sa111

SEO poisoning campaign leverages Gemini and Claude Code impersonation to deliver infostealer

Pulse ID: 6a1284484825661a86bd817e
Pulse Link: https://otx.alienvault.com/pulse/6a1284484825661a86bd817e
Pulse Author: Tr1sa111
Created: 2026-05-24 04:53:28

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #InfoSec #InfoStealer #OTX #OpenThreatExchange #SEOPoisoning #bot #Tr1sa111

Mini Shai-Hulud Hits TanStack npm Packages

Pulse ID: 6a12844fc1060edd372d8d41
Pulse Link: https://otx.alienvault.com/pulse/6a12844fc1060edd372d8d41
Pulse Author: Tr1sa111
Created: 2026-05-24 04:53:35

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #InfoSec #NPM #OTX #OpenThreatExchange #bot #Tr1sa111

Ghost CMS Mass Compromised via CVE-2026-26980, Now Fueling ClickFix Attacks

Pulse ID: 6a12844193310b9bfc7fc2a6
Pulse Link: https://otx.alienvault.com/pulse/6a12844193310b9bfc7fc2a6
Pulse Author: Tr1sa111
Created: 2026-05-24 04:53:21

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #InfoSec #OTX #OpenThreatExchange #bot #Tr1sa111

Apple’s global F1 ambitions hit roadblock as Sky extends U.K. and Italy rights

As Comcast-owned Sky moves early to lock down its F1 media rights in the U.K. and Italy, Apple may be facing an even more competitive path to expanding its Formula One deal beyond the U.S. Here are the details. more…

https://9to5mac.com/2026/05/19/apples-global-f1-ambitions-hit-roadblock-as-sky-extends-u-k-and-italy-rights/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #9to5Mac [9to5Mac]

#chrome extension Patreon Scraper seems malicious. Its #cybersecurity badness score is 85/100!

```json
{"id": "cofdkjlleejhgmhacajalbhedbdncgki", "score": 85, "platform": "chrome", "name": "Patreon Scraper"}
```

#chrome extension كود خصم جيني السعودية اول seems malicious. Its #cybersecurity badness score is 98/100!

```json
{"id": "cddelmfealiejgocenpeoddnpghhhkhd", "score": 98, "platform": "chrome", "name": "\u0643\u0648\u062f \u062e\u0635\u0645 \u062c\u064a\u0646\u064a \u0627\u0644\u0633\u0639\u0648\u062f\u064a\u0629 \u0627\u0648\u0644"}
```