CVE-2025-15385 Insufficient Verification of Data Authenticity in the TECNO Mobile Threat Advisories CyberDefenderJanuary 6, 2026January 6, 20262 mins0 Insufficient Verification of Data Authenticity in the TECNO Mobile com.Afmobi.Boomplayer app that can allow an authentication bypass.…continue reading..
Judge Orders OpenAI to Hand Over 20 Million Anonymized ChatGPT Chats in Copyright Fight CyberSecurity News CyberDefenderJanuary 6, 2026January 6, 20264 mins0 Sidney H. Stein, a district judge in the Southern District of New York, on January 5, 2026,…continue reading..
When a “New Booking” Becomes a Breach: DCRat Malware Targets Europe’s Hospitality Sector Cyber Threat Intelligence AegironJanuary 6, 2026January 6, 202610 mins0 Executive Summary A sustained malware campaign is actively targeting hospitality organizations across Europe using fraudulent booking-related emails…continue reading..
CVE-2023-50897 — Media File Renamer plugin for WordPress Plugin Vulnerability Vulnerabilities CyberDefenderJanuary 6, 2026January 6, 20263 mins0 CVE-2023-50897 is a critical security vulnerability affecting the Media File Renamer plugin for WordPress (by Meow Apps).…continue reading..
CVE-2026-0621: Single-Request Denial of Service in MCP TypeScript SDK via Catastrophic Regex Backtracking Vulnerabilities AegironJanuary 6, 2026January 6, 20269 mins0 Vulnerability Overview (At-a-Glance) Executive Summary CVE-2026-0621 is a denial-of-service vulnerability caused by unsafe regular expression construction in…continue reading..
CVE-2025-15029 — Centreon Infra Monitoring (Awie Export) || CVE-2025-15026 — Centreon Infra Monitoring (Awie Import) Threat Advisories CyberDefenderJanuary 6, 2026January 6, 20264 mins0 CVE-2025-15029 — Centreon Infra Monitoring (Awie Export) Severity: CriticalVulnerability Type: Unauthenticated SQL Injection (CWE-89)Impact: Database compromise (data…continue reading..
CVE-2026-21439: badkeys Output Injection Allows Terminal Manipulation and CI/Audit Misrepresentation Vulnerabilities AegironJanuary 6, 2026January 6, 20268 mins0 Executive Summary (At a Glance) What Is the Vulnerability? This vulnerability occurs because badkeys prints user-supplied data…continue reading..
CVE-2026-21675: Critical iccDEV Memory Corruption Flaw Enables Malicious ICC Profiles to Compromise Image Pipelines Vulnerabilities AegironJanuary 6, 2026January 6, 20268 mins0 CVE ID: CVE-2026-21675Affected component: iccDEV (ICC Color Management Development Kit)Affected versions: iccDEV ≤ 2.3.1Fixed version: 2.3.1.1Vulnerability type:…continue reading..
CVE-2025-14346 – Critical Bluetooth Vulnerability in WHILL Wheelchairs Vulnerabilities CyberDefenderJanuary 6, 2026January 6, 20262 mins0 Affected Products Severity Vulnerability Description Impact Mitigations & Fixes Vendor / Firmware UpdatesWHILL issued mitigations (rolled out…continue reading..
CVE-2025-55204 – One-Click Remote Code Execution in Muffon Threat Advisories CyberDefenderJanuary 6, 2026January 6, 20263 mins0 Severity: Critical / High (CVSS 3.1 8.8)Product: muffon — a cross-platform desktop music streaming client Affected Versions:…continue reading..
