Recent Advisories

Severity ID Title Vendor Product Date Type
HIGH 8.8 THN:DED9C232B49...

LiteLLM Vulnerability Chain Lets Low-Privilege Users Take Over AI Gateway Servers_THN:DED9C232B49BBF1CB0977760C793F104

![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjiH9LcMRhk5Li59rG05yXoOOofNzGpeG1MMSKQqhFCGW_28n0SjLKd9D4MC68N7jPP6dF2h2l8gW1OE7Y7ak...

N/A N/A THN
NONE MALWAREBYTES:BF...

Deepfake porn sites are going offline (re-air) (Lock and Code S07E12)_MALWAREBYTES:BF08B1C9F99DFB1F6F78F43B4FDCFAE4

_This week on the Lock and Code podcast …_ If you weren't taking deepfakes seriously before, it's too late now to ignore them. According to new ...

N/A N/A MALWAREBYTES
NONE MALWAREBYTES:DD...

Claude Fable 5 and Mythos 5 “abruptly disabled” after US gov. ban_MALWAREBYTES:DD733E96F8F10DD6044EE94F4172A510

Anthropic has been ordered by the US government to cut off its newest Claude Fable 5 and Mythos 5 models for fear of abuse by adversaries. Reuters...

N/A N/A MALWAREBYTES
NONE QUALYSBLOG:FAEE...

What Changed in OWASP Top 10 2025 and Recommendations for Each Category_QUALYSBLOG:FAEEFB8C63E738452101F3466498A8D5

##### Key Takeaways * The 2025 list introduces two new categories – Software Supply Chain Failures (A03) and Mishandling of Exceptional Conditi...

N/A N/A QUALYSBLOG
HIGH 7.5 THN:0C053FA1B9E...

One-Click Microsoft 365 Copilot Flaw Could Have Let Attackers Steal Emails, Files_THN:0C053FA1B9E28CFF8B119BFB93E9A94A

![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgH3B8zgsVZmHEyLi8McE-eOrGvwf6Uh3zyqWrttvaEddXJCot7sybI1o-Ly5Q1TtuEJx9BzXol3oaXSFdzFi...

N/A N/A THN
NONE IMPERVABLOG:250...

Your Security Operations Team Just Got Faster: Meet Imperva’s AI Assistant._IMPERVABLOG:250A3AD5186A262EDA974E570969EADA

There is a moment every security analyst knows well. It’s **2am** , an alert fires, and you’re staring at a console trying to make sense of what ju...

N/A N/A IMPERVABLOG
NONE H1:3803415

curl: Secure cookies leaked to HTTP origins through HTTPS forwarding proxy_H1:3803415

## Summary: When curl accesses an `http://` origin through an HTTPS forwarding proxy, it sends Secure cookies in the request. The cookies travel in...

N/A N/A HACKERONE
NONE HACKREAD:C96CEA...

Feds Seize CFAKE and SOCFAKE Over Explicit Deepfakes of Famous Women_HACKREAD:C96CEA8B9566704A0DFB88811DD010FA

Both CFAKE and SOCFAKE (CFAKE.com and SOCFAKE.com) were seized after prosecutors said they hosted nonconsensual nude digital forgeries of famous wo...

N/A N/A HACKREAD
HIGH 8.8 THN:856A8FFBDB6...

⚡ Weekly Recap: Chrome 0-Day, UniFi Exploits, macOS Stealers, VPN Flaw and More_THN:856A8FFBDB69929C783A53A3AC085A13

![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgOtdohah5P1Lv9egIZCwwxpEdcV4phYigmhvgzB3ulDhSeeffe4qDsVoowrzaTD6WsgwyjKIdJ_vzvnsUJ78...

N/A N/A THN
NONE SCHNEIER:7723BF...

The FCC Wants to Eliminate Burner Phones_SCHNEIER:7723BF6584DCFB55D5E28C8CAF2C800F

A proposed FCC rule would kill burner phones: phones whose accounts are not attached to a particular person. > The FCC plans to do this by legally...

N/A N/A SCHNEIER