-
In-depth analysis of CVE-2025-33234: NVIDIA runx contains this vulnerability. (30-01-2026)
Preface: According to the NVIDIA security bulletin for runx updated January 23, 2026 – A vulnerability (CVE‑2025‑33234) was found “during End of Support, but prior to End of Life.” Background: An ML hyperparameter sweep is the automated process of systematically testing different combinations of hyperparameter values for a machine learning model to identify the configuration…
-
Retrospective: CVE‑2025‑59718 and CVE‑2025‑59719 both involve weaknesses in how FortiCloud handles SSO authentication and authorization, but they are not only about attribute/role mapping. They relate more broadly to how SSO assertions are validated and how privilege assignment occurs. (29-01-2026)
Preface: You can summarize it as: “FortiCloud MUST fail SSO login when mandatory SAML attributes are missing, malformed, incorrect, unsigned, or expired. No fallback admin privileges are permitted under any circumstance”. Background: A patch for CVE-2025-59718 and CVE-2025-59719 contains a vulnerability that allows attackers to bypass SSO login verification via a carefully crafted SAML message,…
-
Can we say that CVE-2025-0647 is not limited to the officially released affected products list? 28-01-2026
Official Last updated: 14 Jan 2026 Preface: Smartphones using the ARM Cortex-X925 CPU core are primarily powered by the MediaTek Dimensity 9400 and Dimensity 9400+ chipsets. Key flagship devices featuring this processor include the OPPO Find X8 Pro, vivo X200 series, and Xiaomi 15T Pro. These phones utilize the chip’s “all-big-core” design for high-performance computing.…
-
CVE-2025-13952: Advanced driver assistance systems (ADAS) and smartphones stay alert! (27-1-2026)
Preface: The Unified Shading Cluster (USC) is a fundamental part of the PowerVR Rogue architecture and subsequent series. The USC acts as the central shader core, where vertex, fragment, and compute tasks are executed on unified hardware. It is central to PowerVR’s Tile-Based Deferred Rendering (TBDR) architecture. To write shader code for Imagination Technologies’ PowerVR…
-
CVE-2026-0828: Design weakness in Safetica’s ProcessMonitorDriver[.]sys kernel driver (26th Jan 2026)
Preface: Safetica is a Data Loss Prevention (DLP) and Insider Risk Management (IRM) solution that stops data breaches and protects companies from insider threats. Safetica was recognized as a “Trail Blazer” in the 2025 Data Loss Prevention Market Quadrant, indicating its growing influence and innovative, best-of-breed technology. Safetica consistently ranks as a leader in G2’s…
-
CVE-2025-33228: About NVIDIA Nsight Systems (23rd Jan 2026)
Preface: Nsight Systems is a tool for developers who need to understand the big picture of application execution on heterogeneous systems, especially in scenarios involving data transfer bottlenecks between the CPU and GPU or scaling across multiple nodes. Background: In NVIDIA Nsight Systems, process_nsys_rep_cli[.]py is an internal Python script used primarily for post-processing and report…
-
CVE-2025-33233 – About NVIDIA Merlin Transformers4Rec for all platform 22nd Jan 2026
Official Updated 01/20/2026 Preface: Data engineers perform seamless preprocessing, a foundational stage where they gather messy, raw data from diverse sources, clean it (handling missing values, outliers, inconsistencies), integrate disparate datasets, and transform it into a unified, structured format, making it ready and reliable for data scientists to perform advanced feature engineering (creating new, meaningful…
-
The media reports in January 2026 were triggered by a security warning issued by Apple on December 16, 2025! (20th Jan 2026)
Preface: This article is scheduled for release on January 21, 2026. It may contain some key topics that will be helpful to developers. Therefore it release today. The “spyware” mentioned in April 2025 was the Apple Company policy, but the attacks reported in January 2026 are live threats using newer exploits (CVE-2025-43529 and CVE-2025-14174). If…
-
CVE-2025-13328: About multiplexer control commands from the ETSI TS 07.10 20th Jan 2026
Mitre, NVD Official Published: 2026-01-16 Preface: ETSI TS 07.10 defines the multiplexer protocol for GSM networks, and DLCI 0 (Data Link Connection Identifier 0) specifically refers to the control channel used to manage multiple virtual serial sessions (like data, fax, voice) over a single physical serial link or its wireless emulation (like Bluetooth’s RFCOMM) to…
-
CVE-2025-29943: CPU-caused stack corruption issue caused by flipping an undocumented MSR bit (19th Jan 2026)
Initial publication: 2026-01-15 Preface: CVE-2025-29943 allows disabling AES-NI at runtime, forcing mbedTLS to fall back to a vulnerable software AES implementation. In SGX enclaves, this enables cache-timing attacks to recover AES keys. Attack Prerequisites: Background: An SGX enclave (Software Guard eXtensions) is a secure, isolated area within a computer’s processor and memory, creating a Trusted…