Category Archives: Uncategorized

Redis patches critical “RediShell” RCE vulnerability, update ASAP! (CVE-2025-49844)

Redis, the company behind the widely used in-memory data structure store of the same name, has released patches for a critical vulnerability (CVE-2025-49844) that may allow attackers full access to the underlying host system. “This flaw allows a post auth attacker to send a specially crafted malicious Lua script (a feature supported by default in Redis) to escape from the Lua sandbox and achieve arbitrary native code execution on the Redis host,” Wiz researchers noted. … More → The post Redis patches critical “RediShell” RCE vulnerability, update ASAP! (CVE-2025-49844) appeared first on Help Net Security.
http://news.poseidon-us.com/TNXCbx

Physicists just built a quantum lie detector. It works

An international team has confirmed that large quantum systems really do obey quantum mechanics. Using Bell’s test across 73 qubits, they proved the presence of genuine quantum correlations that can’t be explained classically. Their results show quantum computers are not just bigger, but more authentically quantum. This opens the door to more secure communication and stronger quantum algorithms.
http://news.poseidon-us.com/TNX9dd

Scientists accidentally create a tiny “rainbow chip” that could supercharge the internet

Researchers at Columbia have created a chip that turns a single laser into a “frequency comb,” producing dozens of powerful light channels at once. Using a special locking mechanism to clean messy laser light, the team achieved lab-grade precision on a small silicon device. This could drastically improve data center efficiency and fuel innovations in sensing, quantum tech, and LiDAR.
http://news.poseidon-us.com/TNX9dC

Barracuda Research centralizes AI-driven threat intelligence and incident analysis

Barracuda Networks has introduced Barracuda Research, a new centralized resource for threat intelligence, real-world incident analysis, email threat detection data from Barracuda AI, and more. Barracuda Research is designed to equip IT and security professionals, as well as managed service providers, with actionable insights to understand the latest threats facing organizations, the signs to look for and practical steps to stay protected. The launch of Barracuda Research comes at a time when organizations face growing … More → The post Barracuda Research centralizes AI-driven threat intelligence and incident analysis appeared first on Help Net Security.
http://news.poseidon-us.com/TNX4nF

OPSWAT’s MetaDefender Drive delivers portable, network-free threat scanning

OPSWAT launched MetaDefender Drive with Smart Touch, a portable cybersecurity device designed for malware and compliance scanning of transient cyber assets regardless of network connectivity. It works across servers, desktops, and laptops before they enter secure environments. The device lets security teams to prevent cyberattacks, which can severely impact operations, including downtime from inbound and transient assets. Purpose-built for critical infrastructure, MetaDefender Drive with Smart Touch is a compact, handheld device featuring physical connectivity controls … More → The post OPSWAT’s MetaDefender Drive delivers portable, network-free threat scanning appeared first on Help Net Security.
http://news.poseidon-us.com/TNX4mf

Leaked Oracle EBS exploit scripts expected to drive new wave of attacks (CVE-2025-61882)

Resecurity and watchTowr researchers have analyzed the leaked scripts used by attackers to exploit CVE-2025-61882 on internet-facing Oracle ESB instances. Whether the attackers were Cl0p or LAPSUS$, both, or even additional threat actors is still unknown, as the scripts have been leaked on Telegram. CVE-2025-61882 exploit scripts analyzed “What we have observed is that CVE-2025-61882 (…) is not ‘just’ one vulnerability. It is a poetic flow of numerous small/medium weaknesses,” watchTowr researchers Sina Kheirkhah and … More → The post Leaked Oracle EBS exploit scripts expected to drive new wave of attacks (CVE-2025-61882) appeared first on Help Net Security.
http://news.poseidon-us.com/TNWy7b

Businesses grapple with patchwork of digital laws in EU

The European Union has adopted 101 regulations, with at least 20 more in progress, creating a complex landscape for businesses with EU operations.
http://news.poseidon-us.com/TNWvlm

How to get better results from bug bounty programs without wasting money

The wrong bug bounty strategy can flood your team with low-value reports. The right one can surface critical vulnerabilities that would otherwise slip through. A new academic study based on Google’s Vulnerability Rewards Program (VRP) offers rare data on how to tell the difference. The team behind the study included experts from Harvard, Bocconi University, Hebrew University, and Google Research. They analyzed data before and after a major change in July 2024, when Google increased … More → The post How to get better results from bug bounty programs without wasting money appeared first on Help Net Security.
http://news.poseidon-us.com/TNWcGy