⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Microsoft SharePoint: Microsoft SharePoint contains a deserialization of untrusted data vulnerability that allows an unauthorized attacker to execute code over a network.
Fortinet FortiSandbox: Fortinet FortiSandbox contains an OS command injection vulnerability that could allow an unauthenticated attacker to execute unauthorized code or commands via crafted HTTP requests.
An academic study revealed a widespread class of vulnerabilities in 4G and 5G core networks, caused by implicit trust between network functions. These flaws could be exploited for denial-of-service attacks and session hijacking.
An academic study from Nanyang Technological University has disclosed 84 security vulnerabilities in 4G and 5G core networks. These flaws could be exploited to launch denial-of-service attacks or hijack user network sessions, posing a significant risk to mobile communications.
Researchers from Nanyang Technological University discovered 84 vulnerabilities in 4G and 5G core networks, affecting open-source implementations like Open5GS, OpenAirInterface, free5GC, SD-Core, and eUPF. These flaws, rooted in implicit trust between core network functions, enable denial-of-service (DoS) attacks and session hijacking, allowing attackers to take over user sessions. The vulnerabilities stem from weaknesses in GTP-C and PFCP protocols, where components fail to validate message formats or resource availability.
Device code phishing, which exploits the OAuth 2.0 device authorization grant to steal access tokens, has rapidly become a major threat in 2026. Originally used in red-team exercises, it now operates at scale, targeting devices like smart TVs and printers with constrained input capabilities.