Category: EN

H2O-3 JDBC Deserialization Vulnerability (CVE-2025-6507)

Overview Recently, NSFOCUS CERT detected that H2O-3 released a security update to fix the H2O-3 JDBC deserialization vulnerability (CVE-2025-6507); This vulnerability is a bypass of CVE-2024-45758 and CVE-2024-10553. Due to the deserialization flaw in the system’s JDBC connection processing logic,…

XWorm Malware Adopts New Infection Chain to Bypass Security Detection

Cybersecurity researchers have identified a sophisticated evolution in XWorm malware operations, with the backdoor campaign implementing advanced tactics to evade detection systems. The Trellix Advanced Research Center has documented this significant shift in the malware’s deployment strategy, revealing a deliberate…

Are Your NHIs Fully Protected from Cyber Threats?

Understanding the Significance of NHIs in Cybersecurity Why are Non-Human Identities (NHIs) so crucial in cybersecurity? These machine identities consist of Secrets (encrypted tokens, keys, or passwords) and permissions that are akin to a passport-visa system. NHIs and their Secrets…

Ensuring Compliance and feeling reassured in the Cloud

How Can Non-Human Identities (NHIs) Enhance Cloud Security? Is your organization leveraging the power of Non-Human Identities (NHIs) and Secrets Security Management to fortify cloud security? If not, you could be leaving yourself vulnerable to potential cyber threats. The management…

Innovator Spotlight: Whalebone

Cybersecurity DNS Security for a Safer Digital Life Whalebone is redefining how telcos, ISPs, and enterprises protect their customers in a world where every device is online and every click… The post Innovator Spotlight: Whalebone appeared first on Cyber Defense…