Development

The advanced persistent threat (APT) actor known as Transparent Tribe has been observed targeting both Windows and BOSS (Bharat Operating…

A Buffalo Police detective has been hit with a superseding federal indictment for allegedly attempting to purchase stolen credentials from…

The Italian Agency for Digitalization (Agid) has confirmed a large-scale cyberattack targeting hotel servers across Italy. Tens of thousands of…

India’s Central Bureau of Investigation (CBI) has dismantled a transnational cybercrime ring accused of defrauding US nationals of more than…

Security Information and Event Management (SIEM) systems act as the primary tools for detecting suspicious activity in enterprise networks, helping…

Cybersecurity today moves at the pace of global politics. A single breach can ripple across supply chains, turn a software…

Cybersecurity researchers have flagged a new phishing campaign that’s using fake voicemails and purchase orders to deliver a malware loader…

Docker has released fixes to address a critical security flaw affecting the Docker Desktop app for Windows and macOS that…

A China-nexus threat actor known as UNC6384 has been attributed to a set of attacks targeting diplomats in Southeast Asia…

A cyber insurance provider is taking issue with competitors that won’t pay claims resulting from unpatched vulnerabilities. In a recent…

This blog discusses AI-First Engineering and why compliance matters for enterprise adoption. It covers the need for regulatory harmonization, existing global standards, and the business impact of embedding compliance early. Leaders will learn how observability and quality act as shields for growth, innovation, and long-term trust.
The post AI-First Engineering in a Regulated World: Why Harmozized Rules Matter first appeared on TestingXperts.

Comments Source: Read More 

CVE ID : CVE-2025-54491

Published : Aug. 25, 2025, 2:15 p.m. | 10 hours, 55 minutes ago

Description : A stack-based buffer overflow vulnerability exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.0 and Master Branch (35a819fa). A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability manifests on line 9191 of biosig.c on the current master branch (35a819fa), when the Tag is 65:

else if (tag==65) //0x41: patient event
{
// event table

curPos += ifread(buf,1,len,hdr);

Severity: 9.8 | CRITICAL

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

CVE ID : CVE-2025-54492

Published : Aug. 25, 2025, 2:15 p.m. | 10 hours, 55 minutes ago

Description : A stack-based buffer overflow vulnerability exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.0 and Master Branch (35a819fa). A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability manifests on line 9141 of biosig.c on the current master branch (35a819fa), when the Tag is 67:

else if (tag==67) //0x43: Sample skew
{
int skew=0; // [1]
curPos += ifread(&skew, 1, len,hdr);

In this case, the address of the newly-defined integer `skew` [1] is overflowed instead of `buf`. This means a stack overflow can occur using much smaller values of `len` in this code path.

Severity: 9.8 | CRITICAL

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

CVE ID : CVE-2025-54493

Published : Aug. 25, 2025, 2:15 p.m. | 10 hours, 55 minutes ago

Description : A stack-based buffer overflow vulnerability exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.0 and Master Branch (35a819fa). A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability manifests on line 9184 of biosig.c on the current master branch (35a819fa), when the Tag is 131:

else if (tag==131) //0x83
{
// Patient Age
if (len!=7) fprintf(stderr,”Warning MFER tag131 incorrect length %i!=7n”,len);
curPos += ifread(buf,1,len,hdr);

Severity: 9.8 | CRITICAL

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

CVE ID : CVE-2025-54494

Published : Aug. 25, 2025, 2:15 p.m. | 10 hours, 55 minutes ago

Description : A stack-based buffer overflow vulnerability exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.0 and Master Branch (35a819fa). A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability manifests on line 9205 of biosig.c on the current master branch (35a819fa), when the Tag is 133:

else if (tag==133) //0x85
{
curPos += ifread(buf,1,len,hdr);

Severity: 9.8 | CRITICAL

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

CVE ID : CVE-2025-32468

Published : Aug. 25, 2025, 3:15 p.m. | 9 hours, 55 minutes ago

Description : A memory corruption vulnerability exists in the BMPv3 Image Decoding functionality of the SAIL Image Decoding Library v0.9.8. When loading a specially crafted .bmp file, an integer overflow can be made to occur when calculating the stride for decoding. Afterwards, this will cause a heap-based buffer to overflow when decoding the image which can lead to remote code execution. An attacker will need to convince the library to read a file to trigger this vulnerability.

Severity: 8.8 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

CVE ID : CVE-2025-35984

Published : Aug. 25, 2025, 3:15 p.m. | 9 hours, 55 minutes ago

Description : A memory corruption vulnerability exists in the PCX Image Decoding functionality of the SAIL Image Decoding Library v0.9.8. When decoding the image data from a specially crafted .pcx file, a heap-based buffer overflow can occur which allows for remote code execution. An attacker will need to convince the library to read a file to trigger this vulnerability.

Severity: 8.8 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

CVE ID : CVE-2025-46407

Published : Aug. 25, 2025, 3:15 p.m. | 9 hours, 55 minutes ago

Description : A memory corruption vulnerability exists in the BMPv3 Palette Decoding functionality of the SAIL Image Decoding Library v0.9.8. When loading a specially crafted .bmp file, an integer overflow can be made to occur which will cause a heap-based buffer to overflow when reading the palette from the image. These conditions can allow for remote code execution. An attacker will need to convince the library to read a file to trigger this vulnerability.

Severity: 8.8 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

CVE ID : CVE-2025-50129

Published : Aug. 25, 2025, 3:15 p.m. | 9 hours, 55 minutes ago

Description : A memory corruption vulnerability exists in the PCX Image Decoding functionality of the SAIL Image Decoding Library v0.9.8. When decoding the image data from a specially crafted .tga file, a heap-based buffer overflow can occur which allows for remote code execution. An attacker will need to convince the library to read a file to trigger this vulnerability.

Severity: 8.8 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…