#security-patch
#security-patch
[ follow ]
#android-16 #software-update #beta-update #cybersecurity #samsung #one-ui-8 #chrome #v8 #zero-day #type-confusion
fromGSMArena.com
2 weeks agoOnePlus 15 already receives its first update
The update includes the November 2025 security patch level. The changelog mentions faster app launches from the Home screen, customizable widget names, the ability to resize the clock in Flux themes, widgets being draggable onto other widgets to stack them, automatic straightening being available when cropping and rotating portrait and architectural images in Photos, videos can be set as ringtones, improved virus scanning speed,
Gadgets
fromInfoQ
2 weeks agoMicrosoft Patches Critical ASP.NET Core Vulnerability with 9.9 Severity Score
The vulnerability has been identified in ASP.NET Core versions 10.0, 9.0, 8.0, and the Kestrel package for 2.x. An attacker who is already authorized can bypass a security feature by exploiting inconsistent parsing of HTTP requests and responses. Microsoft states there are no known mitigating factors for the HTTP request/response smuggling scenario and strongly recommends patching to the listed fixed versions to prevent the security bypass.
Information security
fromGSMArena.com
4 weeks agoXiaomi 15 global units start receiving Android 16-based HyperOS 3 stable update
Xiaomi recently rolled out the Android 16-based HyperOS 3 stable update for the Xiaomi 15T and 15T Pro's global units, and now it's the non-T model that's getting upgraded to HyperOS 3. The HyperOS 3 stable update for the global Xiaomi 15 is currently rolling out in some European countries for Mi Pilot members, but the rollout should expand to more regions soon.
Gadgets
Software development
fromIT Pro
1 month agoMicrosoft issues fix for Windows 11 update that bricked mouse and keyboard controls in recovery environment - here's what you need to know
Windows 11 October 2025 security update (KB5066835) disabled USB input in WinRE; Microsoft issued an out-of-band patch to restore functionality.
fromTheregister
2 months agoCritical, make-me-super-user SAP S/4HANA bug being exploited
SAP issued a patch for the 9.9-rated flaw in August. It is tracked as CVE-2025-42957, and it affects both private cloud and on-premises versions. According to SecurityBridge Threat Research Labs, which originally spotted and disclosed the vulnerability to SAP, the team "verified actual abuse of this vulnerability." It doesn't appear to be widespread (yet), but the consequences of this flaw are especially severe.
Information security
Information security
fromArs Technica
3 months agoHigh-severity vulnerability in Passwordstate credential manager. Patch now.
High-severity authentication bypass in Passwordstate lets attackers use a crafted URL to reach Emergency Access and potentially gain administrative access; install patch immediately.
Information security
fromThe Hacker News
3 months agoDocker Fixes CVE-2025-9074, Critical Container Escape Vulnerability With CVSS Score 9.3
Critical Docker Desktop vulnerability (CVE-2025-9074) allowed containers unauthenticated access to Docker Engine API, enabling host compromise; fixed in version 4.44.3.
#cybersecurity
Information security
fromThe Hacker News
5 months agoCritical Cisco ISE Auth Bypass Flaw Impacts Cloud Deployments on AWS, Azure, and OCI
Cisco patched a critical vulnerability in Identity Services Engine (ISE) that allows unauthenticated attackers to exploit shared static credentials.
The flaw, CVE-2025-20286, poses significant risk to cloud installations of Cisco ISE.
[ Load more ]