This month in security with Tony Anscombe – June 2025 edition

June 29, 2025

From Australia’s new ransomware payment disclosure rules to another record-breaking DDoS attack, June 2025 saw no shortage of interesting cybersecurity news

Source: Read More

Previous Article10 Best Free Landing Page Themes for WordPress in 2025

Next Article Windows 11 Media Creation Tool downloads fresh 24H2 update for clean install

Highlights

CVE-2025-43855 – Apache tRPC WebSocket Server Crash Vulnerability (Denial of Service)

April 24, 2025

CVE ID : CVE-2025-43855

Published : April 24, 2025, 2:15 p.m. | 44 minutes ago

Description : tRPC allows users to build & consume fully typesafe APIs without schemas or code generation. In versions starting from 11.0.0 to before 11.1.1, an unhandled error is thrown when validating invalid connectionParams which crashes a tRPC WebSocket server. This allows any unauthenticated user to crash a tRPC 11 WebSocket server. Any tRPC 11 server with WebSocket enabled with a createContext method set is vulnerable. This issue has been patched in version 11.1.1.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

CodeSOD: A Unique Way to Primary Key

BrowserStack launches Figma plugin for detecting accessibility issues in design phase

Parasoft brings agentic AI to service virtualization in latest release

Node.js vs. Python for Backend: 7 Reasons C-Level Leaders Choose Node.js Talent

The best CRM software with email marketing in 2025: Expert tested and reviewed

This multi-port car charger can power 4 gadgets at once – and it’s surprisingly cheap

I’m a wearables editor and here are the 7 Pixel Watch 4 rumors I’m most curious about

8 ways I quickly leveled up my Linux skills – and you can too

The Intersection of Agile and Accessibility – A Series on Designing for Everyone

The Intersection of Agile and Accessibility – A Series on Designing for Everyone

Zero Trust & Cybersecurity Mesh: Your Org’s Survival Guide

Execute Ping Commands and Get Back Structured Data in PHP

A Tomb Raider composer has been jailed — His legacy overshadowed by $75k+ in loan fraud

A Tomb Raider composer has been jailed — His legacy overshadowed by $75k+ in loan fraud

“I don’t think I changed his mind” — NVIDIA CEO comments on H20 AI GPU sales resuming in China following a meeting with President Trump

Galaxy Z Fold 7 review: Six years later — Samsung finally cracks the foldable code

This month in security with Tony Anscombe – June 2025 edition

GPT-5 is Coming: Revolutionizing Software Testing

Win the Accessibility Game: Combining AI with Human Judgment

Google Researchers Introduce LightLab: A Diffusion-Based AI Method for Physically Plausible, Fine-Grained Light Control in Single Images

How this ‘FinOps for AI’ certification can help you tackle surging AI costs

Microsoft Tests AI-Curated News Feed in Edge’s Copilot New Tab Page

Sam Altman says “I don’t do Google searches anymore” — but admits ChatGPT won’t be Google’s killer

CVE-2025-43855 – Apache tRPC WebSocket Server Crash Vulnerability (Denial of Service)

The best e-commerce website builders of 2025: Expert tested

CVE-2025-2769 – Bdrive NetDrive OpenSSL Privilege Escalation Vulnerability

CoreDNS Vulnerability Let Attackers Exhaust Server Memory Via Amplification Attack

This month in security with Tony Anscombe – June 2025 edition

Related Posts