The Cybersecurity and Infrastructure Security Agency has updated its Known Exploited Vulnerabilities catalog to include four old Microsoft security issues, reports The Register.
ITPro reports that new research from Wiz contends that artificial intelligence is not conjuring novel categories of vulnerabilities but rather aggressively multiplying the real estate where classic, preventable errors, like credential leaks and misconfigurations, can wreak havoc.
The vulnerability, discovered by Nicholas Carlini, is a cryptographic validation flaw affecting multiple signature algorithms in wolfSSL, including ECDSA/ECC, DSA, ML-DSA, Ed25519, and Ed448.
The vulnerability, identified as CVE-2025-0520 with a CVSS score of 9.4, allows for unrestricted file uploads due to improper file extension validation.
SecurityWeek reports that Jupiter Networks, a networking hardware and software company, has issued patches for around 30 vulnerabilities in Junos OS and related systems.
