security Archives Page 2698 of 27450 | Cyberthreat Blog from Fortify24x7

Why You Need Phishing Resistant Authentication NOW., (Tue, Sep 16th)

by Cyberthreat Blog | Sep 16, 2025 | SANS ISC Bulletins | 0 |

The recent (and still ongoing) phishing of NPM developer accounts showed yet again that even...

Apple Updates Everything – iOS/macOS 26 Edition, (Mon, Sep 15th)

by Cyberthreat Blog | Sep 15, 2025 | SANS ISC Bulletins | 0 |

Today, as expected, Apple released iOS/iPadOS/macOS/watchOS/tvOS 26. Going forward, Apple will adopt the same OS number across its different offerings, setting us up for a potential year 2100 issue. Notably, VisionOS was not...

Web Searches For Archives, (Sun, Sep 14th)

by Cyberthreat Blog | Sep 14, 2025 | SANS ISC Bulletins | 0 |

Johannes wrote a diary entry “Increasing Searches for ZIP Files” where he analyzed the increase of requests for ZIP files (like backup.zip, web.zip, …) for our web honeypots. I took a look at my logs, and...

VU#949137: Langchaingo supports jinja2 and gonja for syntax parsing, allowing for arbitrary file read

by Cyberthreat Blog | Sep 12, 2025 | CERT-Vulnerabilities | 0 |

Overview LangChainGo, the Go implementation of LangChain, a large language model (LLM) application building framework, has been discovered to contain an arbitrary file read vulnerability. The vulnerability, tracked as...

DShield SIEM Docker Updates, (Wed, Sep 10th)

by Cyberthreat Blog | Sep 10, 2025 | SANS ISC Bulletins | 0 |

Since the last update [5], over the past few months I added several enhancements to DShield SIEM...

VU#974249: Elevated Privileges and Arbitrary Code Execution issues in Sunshine for Windows v2025.122.141614

by Cyberthreat Blog | Sep 10, 2025 | CERT-Vulnerabilities | 0 |

Overview Two local security vulnerabilities have been identified in Sunshine for Windows, version v2025.122.141614 (and likely prior versions). These issues could allow attackers to execute arbitrary code and escalate privileges...

Lab-Based Drug Checking Standards Needs Meeting

by Cyberthreat Blog | Sep 10, 2025 | NIST | 0 |

The Lab-Based Drug Checking Standards Meeting is a two-day event designed to bring together scientists involved in lab-based drug checking, specifically for public health applications. In this meeting we will discuss current...

Microsoft Patch Tuesday September 2025, (Tue, Sep 9th)

by Cyberthreat Blog | Sep 9, 2025 | SANS ISC Bulletins | 0 |

As part of its September patch Tuesday, Microsoft addressed 177 different vulnerabilities, 86 of which affect Microsoft products. None of the vulnerabilities has been exploited before today. Two of the vulnerabilities were...

VU#763183: Amp’ed RF BT-AP 111 Bluetooth access point lacks an authentication mechanism

by Cyberthreat Blog | Sep 9, 2025 | CERT-Vulnerabilities | 0 |

Overview The Amp’ed RF BT-AP 111 Bluetooth Access Point exposes an HTTP-based administrative interface without authentication controls. This allows an unauthenticated remote attacker to gain full administrative access to the...

STPPA8: Special Topics on Privacy and Public Auditability — Event 8: Experimenting with Privacy-Enhancing Cryptography (PEC) Implementations

by Cyberthreat Blog | Sep 9, 2025 | NIST | 0 |

Event name: STPPA #8: Special Topics on Privacy and Public Auditability, Event 8 Date: September 18, 2025 Details and registration: https://csrc.nist.gov/events/2025/stppa8 Event theme: Experimenting with privacy-enhancing...

VU#461364: Hiawatha open-source web server has multiple vulnerabilities

by Cyberthreat Blog | Sep 8, 2025 | CERT-Vulnerabilities | 0 |

Overview Hiawatha is an open-source web server that supports Windows, MacOS X and a variety of Linux distributions. Hiawatha was focused on performance and is used in place of larger, more complex web servers. The fetch_request...

HTTP Request Signatures, (Mon, Sep 8th)

by Cyberthreat Blog | Sep 8, 2025 | SANS ISC Bulletins | 0 |

This weekend, I noticed three related headers being used in requests to some of our honeypots for the first time [1]: Signature-Input Signature-Agent Signature These headers are related to a relatively new feature, HTTP Message...

Tag: security