Category: Uncategorized

  • Five dead after plane carrying child burns victim crashes in Texas

    Five dead after plane carrying child burns victim crashes in Texas


    At least five people have been killed after a Mexican Navy plane crashed in foggy conditions near Galveston, Texas on Monday while transporting a child burns victim.

    According to flight tracking website Flight Radar, the plane was last recorded at 15:01 local time (21:01 GMT) over Galveston Bay, near Scholes International Airport.

    The aircraft was taking part in a medical mission on behalf of the Michou y Mau Foundation, which provides care to Mexican children with severe burns.

    Mexico’s Secretariat of the Navy said one person remains missing and two others were rescued alive.

    Video footage shared with AP news agency showed the wreckage of the plane in the water, with witnesses and police officers seen entering the water to search the debris.

    Sky Decker, a local yacht captain, said he took two police officers to the site of the nearly submerged plane, before jumping in and finding a badly injured woman trapped.

    He said: “I couldn’t believe. She had maybe three inches of air gap to breathe in.

    “And there was jet fuel in there mixed with the water, fumes real bad. She was really fighting for her life.”

    Earlier the Mexican Navy Secretariat said search and rescue operations were under way in co-ordination with the US Coast Guard.

    Video taken near Scholes International Airport in Galveston showed rescuers including a dive team working in dense fog.

    In a statement shared on X, the Michou y Mau Foundation sent “our deepest condolences to the families of the victims of this tragedy”.



    Source link

  • Critical n8n Flaw (CVSS 9.9) Enables Arbitrary Code Execution Across Thousands of Instances

    Critical n8n Flaw (CVSS 9.9) Enables Arbitrary Code Execution Across Thousands of Instances


    Dec 23, 2025Ravie LakshmananVulnerability / Workflow Automation

    A critical security vulnerability has been disclosed in the n8n workflow automation platform that, if successfully exploited, could result in arbitrary code execution under certain circumstances.

    The vulnerability, tracked as CVE-2025-68613, carries a CVSS score of 9.9 out of a maximum of 10.0. The package has about 57,000 weekly downloads, according to statistics on npm.

    “Under certain conditions, expressions supplied by authenticated users during workflow configuration may be evaluated in an execution context that is not sufficiently isolated from the underlying runtime,” the maintainers of the npm package said.

    Cybersecurity

    “An authenticated attacker could abuse this behavior to execute arbitrary code with the privileges of the n8n process. Successful exploitation may lead to full compromise of the affected instance, including unauthorized access to sensitive data, modification of workflows, and execution of system-level operations.”

    The issue, which affects all versions including and higher than 0.211.0 and below 1.120.4, has been patched in 1.120.4, 1.121.1, and 1.122.0. Per the attack surface management platform Censys, there are 103,476 potentially vulnerable instances as of December 22, 2025. A majority of the instances are located in the U.S., Germany, France, Brazil, and Singapore.

    In light of the criticality of the flaw, users are advised to apply the updates as soon as possible. If immediate patching is not an option, it’s advised to limit workflow creation and editing permissions to trusted users and deploy n8n in a hardened environment with restricted operating system privileges and network access to mitigate the risk.



    Source link

  • Injured officer Jack Hibbert released from hospital

    Injured officer Jack Hibbert released from hospital


    PA Media Constable Jack Hibbert dressed in a whiteT-shirt looking down at a dog and sitting in a restaurant.PA Media

    Jack Hibbert had been working as a police officer for just months before he was shot

    A young police officer who was shot in the head during the Bondi Beach attack has been released from hospital.

    Probationary Constable Jack Hibbert – who is just four months into the job – was patrolling a Hanukkah event when two gunmen opened fire, injuring over 40 people and killing 15.

    The 22-year-old, who was also hit in the shoulder, has lost vision in one of his eyes but is now recovering at home, his family confirmed in a statement.

    “As a family, we couldn’t ask for anything more – having our Jack home, especially for Christmas, truly feels like a miracle.”

    They thanked the public for their “overwhelming support” and praised medical staff for their “exceptional” care and dedication.

    “While he is home, he is still recovering and will need space, support, and continued positive thoughts during this time,” the statement added.

    Even after he was shot during the attack, Constable Hibbert continued to help festival attendees until he physically couldn’t, his family previously said.

    “Many of his colleagues who were present on the night of the incident have visited in hospital and given testaments to Jack’s bravery during the incident… They described how Jack acted, he moved toward people in need, not away from danger,” they said.

    He was one of two police officers injured in the shooting, with the second officer Constable Scott Dyson, 25, still recovering from his injuries in hospital, according to the last police update.

    Last week, NSW Police Commissioner Mal Lanyon visited Constable Hibbert in hospital, praising him as a “positive young man”.

    Lanyon added that the force would rally around Constable Hibbert and find “appropriate duties for him” after his recovery.

    Police have alleged the suspected gunmen were inspired by Islamic State ideology and targeted the Jewish festival in what has been declared a terror attack.

    Naveed Akram, 24, has been charged with 59 offences, including 15 counts of murder and one of terror. A second gunman – his father, Sajid Akram – was shot dead by police at the scene.

    On Monday, new court documents alleged the pair “meticulously” planned the attack for months, and two days prior to the shooting, visited Bondi for reconnaissance.



    Source link