🐛 COMMON VULNERABILITIES AND EXPOSURES 1[−]
13 JulFortinet FortiWeb Fabric Connector Flaw Enables Remote Code ExecutionSecurity researchers have identified a severe pre-authentication SQL injection vulnerability in Fortinet’s FortiWeb Fabric Connector, designated as CVE-2025-25257, that allows unauthenticated attackers to execute unauthorized SQL commands and potentially achieve remote code…GBHACKERS.COM
⚠️ VULNERABILITY DISCLOSURE 2[−]
13 JulWeekly Update 460Presently sponsored by: Malwarebytes Browser Guard blocks phishing, ads, scams, and trackers for safer, faster browsing This week's update is the last remote one for a while as we wind up more than a month of travel. I'm pushing this out just before we jump on the Qanta…TROYHUNT.COM
13 JulGoogle Gemini flaw hijacks email summaries for phishingGoogle Gemini for Workspace can be exploited to generate email summaries that appear legitimate but include malicious instructions or warnings that direct users to phishing sites without using attachments or direct links. [...]BLEEPINGCOMPUTER.COM
🔥 INCIDENT REPORTING 1[−]
13 JulOmnicuris - 215,298 breached accountsIn June 2025, the Indian CME platform Omnicuris suffered a data breach that exposed approximately 200k records of healthcare professionals. The data included names, email addresses, phone numbers, geographic locations and other data attributes relating to professional expertise a…HAVEIBEENPWNED.COM
🕵️ THREAT INTELLIGENCE 2[−]
13 JulHow to Prove False Statements: Practical Attacks on Fiat-Shamirsubmitted by cm0002 to cybersecurity 1 points | 0 comments https://eprint.iacr.org/2025/118.pdfINFOSEC.PUB
13 JulExperimental Suspicious Domain Feed, (Sun, Jul 13th)We have had a "newly registered domain" feed for a few years. This feed pulls data from ICANN&#;x26;#;39;s centralized zone data service ( https://czds.icann.org ) and TLS certificate transparency logs.
ISC.SANS.EDU
📡 INFOSEC NEWS 1[−]
13 JulWindows 10 KB5062554 update breaks emoji panel search featureThe search feature for the Windows 10 emoji panel is broken after installing the KB5062554 cumulative update released Tuesday, making it not possible to look up emojis by name or keyword. [...]BLEEPINGCOMPUTER.COM