MATLOCK.CA
106Articles
10Categories
2025-08-13Date
🚨
CISA Adds Two Known Exploited Vulnerabilities to CatalogCISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation.  CVE-2025-8875 N-able N-central Insecure Deserialization Vulnerability CVE-2025-8876 N-able N-central Command Injection Vulnerability These…
KEVCISA.GOV — Wed, 13 Aug 25 1
🐛
August Patch Tuesday: Authentication hole in Windows Server 2025 now has a fix
KEVCSOONLINE.COM — 13 Aug 2025
🐛
Citrix NetScaler flaw likely has global impact
KEVCSOONLINE.COM — 13 Aug 2025
🐛
Microsoft Teams RCE Flaw Allows Hackers to Read, Modify, and Delete Messages
GBHACKERS.COM — 13 Aug 2025
🐛
New Zero-Click NTLM Credential Leak Exploit Bypasses Microsoft Patch for CVE-2025-24054
GBHACKERS.COM — 13 Aug 2025
🐛
FortiWeb Authentication Bypass Vulnerability Allows Logins as Any Existing User
GBHACKERS.COM — 13 Aug 2025
🐛
Critical FortiSIEM Vulnerability Allows Attackers to Execute Malicious Commands, PoC Found in the Wild
GBHACKERS.COM — 13 Aug 2025
🐛
CVE-2017-11882 Will Never Die, (Wed, Aug 13th)
ISC.SANS.EDU — 13 Aug 2025
🐛
GitHub Copilot RCE Vulnerability via Prompt Injection Enables Full System Compromise
GBHACKERS.COM — 13 Aug 2025
🐛
Windows Remote Desktop Services Flaw Allows Network-Based Denial-of-Service Attacks
GBHACKERS.COM — 13 Aug 2025
🐛
Microsoft Exchange Server Flaws Allow Network-Based Spoofing and Data Tampering
GBHACKERS.COM — 13 Aug 2025
🐛
Microsoft Office Vulnerabilities Allow Attackers to Execute Remote Code
GBHACKERS.COM — 13 Aug 2025
🐛
Hackers exploit unpatched Erlang/OTP to crack OT firewalls
CSOONLINE.COM — 13 Aug 2025
🐛
Fortinet Warns About FortiSIEM Vulnerability (CVE-2025-25256) With In-the-Wild Exploit Code
THEHACKERNEWS.COM — 13 Aug 2025
🐛
New ransomware ‘Charon’ uses DLL sideloading to breach critical infrastructure
CSOONLINE.COM — 13 Aug 2025
🐛
Zoom and Xerox Release Critical Security Updates Fixing Privilege Escalation and RCE Flaws
THEHACKERNEWS.COM — 13 Aug 2025
⚠️
Get Pwned, Get Local Advice From a Trusted Gov Source
TROYHUNT.COM — 13 Aug 2025
⚠️
Schwachstellen managen: Die besten Vulnerability-Management-Tools
CSOONLINE.COM — 13 Aug 2025
⚠️
Adobe Patches Over 60 Vulnerabilities Across 13 Products
SECURITYWEEK.COM — 13 Aug 2025
⚠️
Digital siege puts Taiwan’s resilience to the test: Taipei bets on transparency, civil society as China increases cyber attacks
INFOSEC.PUB — 13 Aug 2025
⚠️
Digital siege puts Taiwan’s resilience to the test: Taipei bets on transparency, civil society as China increases cyber attacks
SH.ITJUST.WORKS — 13 Aug 2025
⚠️
Urgent Vulnerabilities: Patching Exchange, Citrix, and Fortinet
CYBERSECURITYTODAY.LIBSYN.COM — 13 Aug 2025
⚠️
Microsoft August 2025 Patch Tuesday Fixes Kerberos Zero-Day Among 111 Total New Flaws
THEHACKERNEWS.COM — 13 Aug 2025
⚠️
Defending Trust & Reputation as CISOs and Leaders Prepare Their AI Strategy - Santosh ... - BSW #408
YOUTUBE.COM — 2025-08-13
⚠️
Multiple GitLab Vulnerabilities Allow Account Takeover and Stored XSS Attacks
GBHACKERS.COM — 13 Aug 2025
⚠️
Web DDoS and App Exploitation Attacks Surge in First Half of 2025
GBHACKERS.COM — 13 Aug 2025
⚠️
Silicon under siege: Nation-state hackers target semiconductor supply chains
CSOONLINE.COM — 13 Aug 2025
⚠️
Serbia is secretly expanding Chinese surveillance system despite EU warnings and local opposition
INFOSEC.PUB — 13 Aug 2025
⚠️
Serbia is secretly expanding Chinese surveillance system despite EU warnings and local opposition
SH.ITJUST.WORKS — 13 Aug 2025
⚠️
ShinyHunters May Have Teamed Up With Scattered Spider in Salesforce Attack Campaigns
GBHACKERS.COM — 13 Aug 2025
⚠️
Over 3,000 NetScaler devices left unpatched against CitrixBleed 2 bug
SH.ITJUST.WORKS — 13 Aug 2025
⚠️
He Almost Got Fired… for Having Nmap Installed 😱
YOUTUBE.COM — 2025-08-13
⚠️
Hackers Deploy Dedicated Phishlet for FIDO Authentication Downgrade Attacks
GBHACKERS.COM — 13 Aug 2025
⚠️
2 SharePoint Zero Days… AFTER the Patch?! 😳
YOUTUBE.COM — 2025-08-13
⚠️
Spike in Fortinet VPN brute-force attacks raises zero-day concerns
BLEEPINGCOMPUTER.COM — 13 Aug 2025
⚠️
The Altair 8800: Cybersecurity’s Grandfather? #throwbacktech
YOUTUBE.COM — 2025-08-13
⚠️
Adobe’s August 2025 Patch Tuesday Fixes 60 Vulnerabilities Across Multiple Products
GBHACKERS.COM — 13 Aug 2025
⚠️
The Creepy New AI Pricing Tactic No One Told You About
YOUTUBE.COM — 2025-08-13
⚠️
Google’s Android pKVM Framework Achieves SESIP Level 5 Certification
GBHACKERS.COM — 13 Aug 2025
⚠️
They Hacked an AI Assistant With Markdown 😱
YOUTUBE.COM — 2025-08-13
⚠️
Emerging AI-Driven Phishing Trends Reshape Cybercrime Tactics
GBHACKERS.COM — 13 Aug 2025
⚠️
Fortinet warns of FortiSIEM pre-auth RCE flaw with exploit in the wild
BLEEPINGCOMPUTER.COM — 13 Aug 2025
⚠️
That 16 Billion Password Story (AKA "Data Troll")
TROYHUNT.COM — 13 Aug 2025
⚠️
Russian APT group Curly COMrades employs novel backdoor and persistence tricks
CSOONLINE.COM — 13 Aug 2025
⚠️
Risky Business #802 -- Accessing internal Microsoft apps with your Hotmail creds
RISKY.BIZ — 13 Aug 2025
📋
Microsoft Patches Over 100 Vulnerabilities
SECURITYWEEK.COM — 13 Aug 2025
📋
Chrome Security Update Fixes High-Severity Flaws Allowing Arbitrary Code Execution
GBHACKERS.COM — 13 Aug 2025
📋
ICS Patch Tuesday: Major Vendors Address Code Execution Vulnerabilities
SECURITYWEEK.COM — 13 Aug 2025
📋
Fortinet, Ivanti Release August 2025 Security Patches
SECURITYWEEK.COM — 13 Aug 2025
📋
Chipmaker Patch Tuesday: Many Vulnerabilities Addressed by Intel, AMD, Nvidia
SECURITYWEEK.COM — 13 Aug 2025
📋
August Patch Tuesday includes blasts from the (recent) past
SOPHOS.COM — 13 Aug 2025
📢
Ivanti security advisory (AV25-503)
CYBER.GC.CA — 2025-08-13
📢
Microsoft security advisory – August 2025 monthly rollup (AV25-504)
CYBER.GC.CA — 2025-08-13
📢
Adobe security advisory (AV25-505)
CYBER.GC.CA — 2025-08-13
📢
CISA and Partners Release Asset Inventory Guidance to Strengthen Operational Technology Security
CISA.GOV — Wed, 13 Aug 25 1
📢
CISA and Partners Release Asset Inventory Guidance for Operational Technology Owners and Operators
CISA.GOV — Wed, 13 Aug 25 1
📢
GitLab security advisory (AV25-507)
CYBER.GC.CA — 2025-08-13
📢
Fortinet security advisory (AV25-506)
CYBER.GC.CA — 2025-08-13
📢
Critical SSH vulnerabilities expose enterprise network infrastructure as patching lags
NETWORKWORLD.COM — 13 Aug 2025
📢
HPE security advisory (AV25-508)
CYBER.GC.CA — 2025-08-13
📢
Windows 11 24H2 updates failing again with 0x80240069 errors
BLEEPINGCOMPUTER.COM — 13 Aug 2025
📢
F5 security advisory (AV25-509)
CYBER.GC.CA — 2025-08-13
📢
Foxit security advisory (AV25-510)
CYBER.GC.CA — 2025-08-13
📢
CISA’s Free Security Scan: Game-Changer or Gimmick? 🤔
YOUTUBE.COM — 2025-08-13
📢
Intel security advisory (AV25-511)
CYBER.GC.CA — 2025-08-13
🔥
Charon Ransomware Hits Middle East Sectors Using APT-Level Evasion Tactics
THEHACKERNEWS.COM — 13 Aug 2025
🔥
Malicious npm Package Lures Job Seekers and Exfiltrates Sensitive Data
GBHACKERS.COM — 13 Aug 2025
🔥
New Charon Ransomware Uses DLL Sideloading and Anti-EDR Tactics in Targeted Attacks
GBHACKERS.COM — 13 Aug 2025
🔥
Webinar: What the Next Wave of AI Cyberattacks Will Look Like — And How to Survive
THEHACKERNEWS.COM — 13 Aug 2025
🔥
‘Curly COMrades’ APT Hackers Target Critical Organizations Across Multiple Countries
GBHACKERS.COM — 13 Aug 2025
🔥
Manpower Says Data Breach Stemming From Ransomware Attack Impacts 140,000
SECURITYWEEK.COM — 13 Aug 2025
🔥
The MedusaLocker ransomware gang is hiring penetration testers
FORTRA.COM — 13 Aug 2025
🔥
Pennsylvania attorney general's email, site down after cyberattack
BLEEPINGCOMPUTER.COM — 13 Aug 2025
🔥
Data Troll Stealer Logs - 109,532,219 breached accounts
HAVEIBEENPWNED.COM — 13 Aug 2025
🔥
Norwegian Police Say Pro-Russian Hackers Were Likely Behind Suspected Sabotage at a Dam
SECURITYWEEK.COM — 13 Aug 2025
🕵️
ISC Stormcast For Wednesday, August 13th, 2025 https://isc.sans.edu/podcastdetail/9568, (Wed, Aug 13th)
ISC.SANS.EDU — 13 Aug 2025
🕵️
GPT-5 ist geknackt
CSOONLINE.COM — 13 Aug 2025
🕵️
Hacker verkaufen Ausweispapiere Zehntausender Italien-Urlauber
CSOONLINE.COM — 13 Aug 2025
🕵️
SIGINT During World War II
SCHNEIER.COM — 2025-08-13
🕵️
Black Hat Fireside Chat: Automation takes center stage as TLS lifespans grow ever shorter
LASTWATCHDOG.COM — 13 Aug 2025
🕵️
VexTrio Hackers Use Fake CAPTCHAs and Malicious Apps on Google Play & App Store to Target Users
GBHACKERS.COM — 13 Aug 2025
🕵️
Researchers Spot XZ Utils Backdoor in Dozens of Docker Hub Images, Fueling Supply Chain Risks
SH.ITJUST.WORKS — 13 Aug 2025
🕵️
Home Office Phishing Scam Targets UK Immigration Sponsors - Infosecurity Magazine
SH.ITJUST.WORKS — 13 Aug 2025
🕵️
Hackers Raid Dutch Lab, Stealing Data on 500,000 Patients - Infosecurity Magazine
SH.ITJUST.WORKS — 13 Aug 2025
🕵️
Ozone, Coffee & Code: The Smell of Legacy Gear ☕
YOUTUBE.COM — 2025-08-13
🕵️
SmartLoader Malware Masquerades as Legitimate GitHub Repository to Infect Users
GBHACKERS.COM — 13 Aug 2025
🕵️
AI Applications in Cybersecurity
SCHNEIER.COM — 2025-08-13
🕵️
10 Best Purple Teaming Companies in 2025
GBHACKERS.COM — 13 Aug 2025
🕵️
DEF CON research takes aim at ZTNA, calls it a bust
NETWORKWORLD.COM — 13 Aug 2025
🕵️
Infamous XZ Backdoor Found Hidden in Docker Images for Over a Year
GBHACKERS.COM — 13 Aug 2025
🕵️
Microsoft Just Ranked Who AI Will Replace First 👀
YOUTUBE.COM — 2025-08-13
🕵️
Why Threat Modeling Turns Devs into Security Ninjas 🥷
YOUTUBE.COM — 2025-08-13
🕵️
Connect with the security community at Microsoft Ignite 2025
MICROSOFT.COM — 13 Aug 2025
🌐
New PS1Bot Malware Campaign Uses Malvertising to Deploy Multi-Stage In-Memory Attacks
THEHACKERNEWS.COM — 13 Aug 2025
🎙️
Smashing Security podcast #430: Poisoned Calendar invites, ChatGPT, and Bromide
GRAHAMCLULEY.COM — 13 Aug 2025
📡
OpenAI adds new GPT-5 models, restores o3, o4-mini and it's a mess all over again
BLEEPINGCOMPUTER.COM — 13 Aug 2025
📡
Telegram scams in 2025 | Kaspersky official blog
KASPERSKY.COM — 13 Aug 2025
📡
AI SOC 101: Key Capabilities Security Leaders Need to Know
THEHACKERNEWS.COM — 13 Aug 2025
📡
Microsoft asks users to ignore certificate enrollment errors
BLEEPINGCOMPUTER.COM — 13 Aug 2025
📡
Microsoft removes PowerShell 2.0 from Windows 11, Windows Server
BLEEPINGCOMPUTER.COM — 13 Aug 2025
📡
How we found TeaOnHer spilling users’ driver’s licenses in less than 10 minutes
TECHCRUNCH.COM — 13 Aug 2025
📡
Joint guidance on foundations for operational technology cyber security and asset inventory guidance for owners and operators
CYBER.GC.CA — 2025-08-13
📡
Steps to address data spillage in the cloud (ITSAP.50.112)
CYBER.GC.CA — 2025-08-13
📡
New downgrade attack can bypass FIDO auth in Microsoft Entra ID
BLEEPINGCOMPUTER.COM — 13 Aug 2025
📡
OpenAI relaxes GPT-5 rate limit, promises to improve the personality
BLEEPINGCOMPUTER.COM — 13 Aug 2025
📡
Google Gemini's Deep Research is finally coming to API
BLEEPINGCOMPUTER.COM — 13 Aug 2025