Recent Advisories

Severity ID Title Vendor Product Date Type
NONE THN:1A9B2367059...

When Identity is the Attack Path_THN:1A9B23670594DA24C1AB92878BFC6D50

![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgv9W2lSuCdHjvqeLUN5WtqUOgCwe2FAyP1Y_z4oUr1LgM1MdOE5A83gkzSOfGjIosfdlfB4SuLbeVbydeuPa...

N/A N/A THN
HIGH 7.8 THN:146F0EB14CE...

Microsoft Warns of Two Actively Exploited Defender Vulnerabilities_THN:146F0EB14CE7B4D39203C3C0D995DB8F

![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiNxp-fCwFOYcXoyRTmhjpwfvFCjfE36YoU8z-7es2XrOajnfSfpttiB9KMfwqCNbwzHQ85kILhlUwo4DeQFW...

N/A N/A THN
NONE WIRED:FBB28D2ED...

A Hacker Group Is Poisoning Open Source Code at an Unprecedented Scale_WIRED:FBB28D2ED4667DA2092FC02BA590E531

GitHub is just the latest victim of TeamPCP, a gang that has carried out a spree of software supply chain attacks that has impacted hundreds of org...

N/A N/A WIRED
NONE TRENDMICROBLOG:...

One Man, One AI, One Fake Persona: Inside the 5-Year Influence and Fraud ‘Patriot Bait’ Campaign_TRENDMICROBLOG:EB2222B5C61A008BA86767DC4C97652A

A solo Russian-speaking threat actor ran a 5-year Telegram channel and, starting September 2025, used AI to automate its content, credential theft,...

N/A N/A TRENDMICROBLOG
HIGH 7.1 THN:69758D49B9D...

9-Year-Old Linux Kernel Flaw Enables Root Command Execution on Major Distros_THN:69758D49B9DBA748DA17E406DAAF5E65

![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiCjgJwva2lZrAwxHWPZFiphHAhxBdWRyU4gUiAZIStkUP4JU6yej3Z1xVhUtrhaIYVu4IL5KpvOomBDHU_aL...

N/A N/A THN
NONE WIRED:64D672C82...

The EU Is Going Through a Trump-Fueled Breakup With Big Tech_WIRED:64D672C8269967AB6F6288FA76666B08

France is already moving on from Zoom and Microsoft Teams in favor of homegrown alternatives. Other countries are quickly following suit.

N/A N/A WIRED
NONE THN:387FFDF5ED2...

GitHub Internal Repositories Breached via Malicious Nx Console VS Code Extension_THN:387FFDF5ED283C36D4B532508CEED359

![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjJ64wgVqZTQx208NgY0sBvUUQcR5mb-G4ENkfw4PEX9KlJJxEI_uUKQvPG0rReXB4chZ3wXrvNSR1QsrK525...

N/A N/A THN
MEDIUM 6.5 THN:C4052E6A3AF...

Highly Critical Drupal Core Flaw Exposes PostgreSQL Sites to RCE Attacks_THN:C4052E6A3AF91D2CC9C9BB647C097470

![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhyhKX1WKEWbBPd4sElCP9BB26eorxZX1Lo25Mcu-A5bfBUuWT63SQ-Hyycv1YPSlvVeZPfLSEbb8mQnuPvf0...

N/A N/A THN
NONE WIRED:6AA86E804...

A Bipartisan Amendment Would End Police License Plate Tracking Nationwide_WIRED:6AA86E80438522AC4AD16F6730E8961C

One line tucked into a federal highway bill would strip funds from cities and states unless they kill their automated plate tracking programs—effec...

N/A N/A WIRED
NONE H1:3747959

curl: curl –skip-existing has a TOCTOU race that lets a post-check symlink redirect the later download write_H1:3747959

## Summary: The curl CLI's `--skip-existing` option performs a separate existence check before the download body is written. In the verified path, ...

N/A N/A HACKERONE