Aggregator

Fancy Bear Hackers Attacking Governments, Military Entities With New Sophisticated Tools

Cyber Security News
1 week 2 days ago

The notorious Russian cyberespionage group Fancy Bear, also known as APT28, has intensified its operations against governments and military entities worldwide using an arsenal of sophisticated new tools and techniques. Active since 2007, this state-sponsored threat actor has established itself as one of the most persistent and dangerous cyber adversaries, with a documented history of […]

The post Fancy Bear Hackers Attacking Governments, Military Entities With New Sophisticated Tools appeared first on Cyber Security News.

Tushar Subhra Dutta

CVE-2025-46002 | Filemanager up to 2.5.0 HTTP Request filemanager.php path traversal (Exploit 38945 / EUVD-2025-21878)

VulDB Recent Entries
1 week 2 days ago
A vulnerability was found in Filemanager up to 2.5.0 and classified as critical. Affected by this issue is some unknown functionality of the file filemanager.php of the component HTTP Request Handler. The manipulation leads to path traversal. This vulnerability is handled as CVE-2025-46002. The attack may be launched remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2025-46001 | Filemanager 2.3.0 PHP File is_allowed_file_type unrestricted upload (Exploit 38895 / EDB-38895)

VulDB Recent Entries
1 week 2 days ago
A vulnerability, which was classified as critical, was found in Filemanager 2.3.0. Affected is the function is_allowed_file_type of the component PHP File Handler. The manipulation leads to unrestricted upload. This vulnerability is traded as CVE-2025-46001. It is possible to launch the attack remotely. Furthermore, there is an exploit available.
vuldb.com

狗看电视的模式

Solidot
1 week 2 days ago
美国研究人员招募了数百名狗主人收集狗与电视互动的方式。研究考察了狗看电视习惯的趋势，包括主人是否尝试教狗看电视，主人电视每周打开的平均小时数，以及狗关注电视的平均秒数。对狗的评估内容包括它们对动物刺激物、非动物刺激物的反应，以及追随屏幕上的物体的程度。研究发现狗更容易对屏幕上看见的动物而不是其他刺激物作出反应，约 45% 的狗总是能对狗叫和狗吠这类狗噪声作出反应。主人报告为易兴奋的狗被发现会更频繁地追随屏幕上的物体，就好像这些物体存在于现实世界中一样。易害怕或焦虑的狗更容易对汽车喇叭或门铃这类非动物刺激物有反应。调查的狗看电视的平均时长为 14 分 8 秒。

美国法官允许作家对 Anthropic 盗版数百万电子书提起集体诉讼

Solidot
1 week 2 days ago
上个月美国联邦法官裁决 Anthropic 使用书籍训练 AI 是合理使用，但使用盗版书籍训练并不是。法庭文件显示，Anthropic 从盗版网站下载了逾 700 万本书籍。它还购买了数百万本纸质书，拆开装订扫描了每一页，将其以数字形式存储。现在对于使用盗版书籍训练大模型，加州地区法官 William Alsup 允许起诉 Anthropic 侵权的作家代表全美作家提起集体诉讼。Anthropic 从盗版电子书库 LibGen 和 PiLiMi 下载了多达 700 万电子书，在 2021 年和 2022 年创建了一个巨大的存储库。如果作家们胜诉，Anthropic 可能需要赔偿数十亿美元损失。

Threat Actors Exploiting Ivanti Connect Secure Vulnerabilities to Deploy Cobalt Strike Beacon

Cyber Security News
1 week 2 days ago

A sophisticated malware campaign targeting Ivanti Connect Secure VPN devices has been actively exploiting critical vulnerabilities CVE-2025-0282 and CVE-2025-22457 since December 2024. The ongoing attacks demonstrate advanced persistent threat techniques, deploying multiple malware families including MDifyLoader, Cobalt Strike Beacon, vshell, and Fscan to establish long-term access to compromised networks. The attack begins with threat actors […]

The post Threat Actors Exploiting Ivanti Connect Secure Vulnerabilities to Deploy Cobalt Strike Beacon appeared first on Cyber Security News.

Tushar Subhra Dutta

Sophos Intercept X for Windows Vulnerabilities Enable Arbitrary Code Execution

Cyber Security News
1 week 2 days ago

Three critical vulnerabilities in the Sophos Intercept X for Windows product family could allow local attackers to achieve arbitrary code execution with system-level privileges. Identified as CVE-2024-13972, CVE-2025-7433, and CVE-2025-7472, the flaws span registry permission misconfigurations, a weakness in the Device Encryption component, and an issue in the Windows installer running under the SYSTEM account.  […]

The post Sophos Intercept X for Windows Vulnerabilities Enable Arbitrary Code Execution appeared first on Cyber Security News.

Guru Baran

Managed ad