🐛 COMMON VULNERABILITIES AND EXPOSURES 1[−]
12 OctNew Oracle E-Business Suite Bug Could Let Hackers Access Data Without LoginOracle on Saturday issued a security alert warning of a fresh security flaw impacting its E-Business Suite that it said could allow unauthorized access to sensitive data. The vulnerability, tracked as CVE-2025-61884, carries a CVSS score of 7.5, indicating high severity. It affec…THEHACKERNEWS.COM
⚠️ VULNERABILITY DISCLOSURE 4[−]
12 OctWeekly Update 473Presently sponsored by: Malwarebytes Browser Guard blocks phishing, ads, scams, and trackers for safer, faster browsing This week's video was recorded on Friday morning Aussie time, and as promised, hackers dumped data the following day. Listening back to parts of the video …TROYHUNT.COM
12 OctWireshark 4.4.10 and 4.6.0 Released, (Sun, Oct 12th)Wireshark release 4.4.10 fixes 6 bugs and 1 vulnerability (in the MONGO dissector).
ISC.SANS.EDU
12 OctSEC-T 2025submitted by ashar to security_cpe 1 points | 0 comments I attended SEC-T 2025 and it was mostly great. There were Good bits and Ugly bits. The good bits was most of the conference. Nerds and nerd heaven. Lots of coffee, cool talks . The UGLY bit. On a day that the IDF bombed sch…INFOSEC.PUB
12 OctThreat Actors Exploit Discord Webhooks for C2 via npm, PyPI, and Ruby PackagesThreat actors are increasingly abusing Discord webhooks as covert command-and-control (C2) channels inside open-source packages, enabling stealthy exfiltration of secrets, host telemetry, and developer environment data without standing up bespoke infrastructure. Socket’s Th…GBHACKERS.COM
🕵️ THREAT INTELLIGENCE 2[−]
12 OctASCII Smuggling Attack Lets Hackers Manipulate Gemini to Deliver Smuggled Data to Userssubmitted by cm0002 to cybersecurity 3 points | 0 comments https://cybersecuritynews.com/ascii-smuggling-attack-gemini/INFOSEC.PUB
12 OctISC Stormcast For Monday, October 13th, 2025 https://isc.sans.edu/podcastdetail/9652, (Sun, Oct 12th)(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.ISC.SANS.EDU
📡 INFOSEC NEWS 1[−]
12 OctFake 'Inflation Refund' texts target New Yorkers in new scamAn ongoing smishing campaign is targeting New Yorkers with text messages posing as the Department of Taxation and Finance, claiming to offer "Inflation Refunds" in an attempt to steal victims' personal and financial data. [...]BLEEPINGCOMPUTER.COM