As Ukraine’s Defence Forces systematically degrade Russia’s military capabilities, Moscow is increasingly relying on cheaper methods of warfare across Europe.

Pakistan needs an independent, legally protected system of civilian and military intelligence analysis that institutionalises dissent, challenges prevailing

NATO’s Article 3 requires members 'to maintain and develop their individual and collective capacity to resist armed attack.' This includes psychological resistance and the involvement of civil resourc...

Israeli Prime Minister Benjamin Netanyahu has unveiled a new national security doctrine centred on pre-emptive strikes and more aggressive military

In the StAX streaming WS-SecurityPolicy validator, certain relative or unsupported XPath expressions can be converted into paths that never match the actual XML element path. A remote SOAP peer may therefore send a required element without the expected signature or encryption. Users are recommended

Finnish ministries have outlined four possible futures for Russia in 2045 and say Finland must be ready to adapt to any of them, Yle reports. The defence, interior and foreign ministries developed the scenarios through a joint expert project called Russia’s Futures. Project coordinator Terhi Ylit…

In the StAX streaming WS-SecurityPolicy validator, certain relative or unsupported XPath expressions can be converted into paths that never match the actual XML element path. A remote SOAP peer may therefore send a required element without the expected signature or encryption. Users are recommended to upgrade to versions 4.0.2 or …

Posted by Colm O hEigeartaigh on Sep 30 Severity: moderate Affected versions: - Apache WSS4J (org.apache.wss4j:wss4j-ws-security-stax) 4.0.0 before 4.0.2 - Apache WSS4J (org.apache.wss4j:wss4j-ws-security-stax) 3.0.0 before 3.0.6 - Apache WSS4J (org.apache.wss4j:wss4j-ws-security-stax) before 2.4.4 Description: In the WSS4J streaming (StAX) code, a signature reference using the WS-Security STR-Transform leaves an internal "inside signed content" flag permanently set....

As Switzerland’s parliament debates how much to expand the army, SRF asked two experts whether more weapons make the world safer or increase the risk of war. Laurent Goetschel, a political science professor at the University of Basel and director of the peace foundation Swisspeace, said there was…

Political leaders from Greenland, Denmark, the Faroe Islands and the European Union have held a series of meetings in Greenland, with security, a possible reconciliation commission and closer EU cooperation on the agenda, DR reports. European Commission President Ursula von der Leyen visited Gree…

Twig is a template language for PHP. From version 1.0.0 to before version 3.27.0, SecurityPolicy::checkMethodAllowed() unconditionally whitelists all method calls on instances of Twig\Markup. Twig\Markup is not final, so subclasses inherit the bypass. An application that passes an object of a Markup-derived class into a sandboxed template (typically to mark …

At an Aug. 13 Colorado Public Utilities Commission lunch-and-learn, security consultants warned that CJIS Security Policy 6.0 requires expanded monitoring, vendor controls and documentation and urged PSAPs to prepare for monthly scans and stricter audits.