やちべ
yacve.bsky.social
やちべ
@yacve.bsky.social
Yet Another CV.E
just a parody account
Reposted by やちべ
F5 has disclosed a long-term breach by a nation-state attacker involving stolen BIG-IP source code & unpatched vulnerabilities. With CISA warning of an imminent threat, organizations must quickly identify exposed assets & speed up remediation. Read more: https://bit.ly/4oy4nRG
October 21, 2025 at 12:27 AM
Reposted by やちべ
Microsoft、Authenticatorパスワードの自動入力を終了し、ユーザーをEdgeへ移行
#CybersecurityNews
www.bleepingcomputer.com/news/securit...
Microsoft ends Authenticator password autofill, moves users to Edge
Microsoft has announced that it will discontinue the password storage and autofill feature in the Authenticator app starting in July and will complete the deprecation in August 2025.
www.bleepingcomputer.com
May 5, 2025 at 1:30 PM
Reposted by やちべ
SIOSセキュリティブログを更新しました。

Apache Tomcatの脆弱性(Important: CVE-2025-31650, Low: CVE-2025-31651)

#sios_tech #security #vulnerability #セキュリティ #脆弱性 #linux #tomcat #mod_jk #apache

security.sios.jp/vulnerabilit...
Apache Tomcatの脆弱性(Important: CVE-2025-31650, Low: CVE-2025-31651) - SIOS SECURITY BLOG
04/29/2025にApache Tomcatの脆弱性(Important: CVE-2025-31650,
security.sios.jp
April 29, 2025 at 12:20 AM
> h11 is a Python implementation of HTTP/1.1.
> can lead to request smuggling vulnerabilities under certain conditions
> Base Score: 9.1 CRITICAL

NVD - CVE-2025-43859 nvd.nist.gov/vuln/detail/...
NVD - CVE-2025-43859
nvd.nist.gov
April 29, 2025 at 3:10 PM