Aggregator

Currently trending CVE - Hype Score: 1 - NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a stack overflow through specially crafted HTTP requests. A successful exploit of this vulnerability might lead to remote code execution, denial of service, information disclosure, or data ...

Currently trending CVE - Hype Score: 1 - Cursor is a code editor built for programming with AI. In versions 1.2.4 and below, attackers can achieve remote and persistent code execution by modifying an already trusted MCP configuration file inside a shared GitHub repository or editing the file locally on the target's ...

Currently trending CVE - Hype Score: 41 - Type Confusion in WebAssembly in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

A newly discovered campaign dubbed GreedyBear has leveraged over 150 malicious extensions to the Firefox marketplace that are designed to impersonate popular cryptocurrency wallets and steal more than $1 million in digital assets. The published browser add-ons masquerade as MetaMask, TronLink, Exodus, and Rabby Wallet, among others, Koi Security researcher Tuval Admoni said. What makes the

GreedyBear 恶意活动利用150多个伪装成流行加密货币钱包的恶意Firefox扩展程序窃取超百万美元数字资产。攻击者通过"Extension Hollowing"技术绕过安全审查，在合法扩展中植入恶意功能以获取用户信任。这些扩展捕获钱包凭证并将其发送到攻击者服务器，并收集受害者IP地址用于追踪。该活动还涉及仿冒网站和恶意软件分发，影响范围不断扩大。

Уязвимость усугубляет децентрализованная модель импорта из GitHub.

电脑高手實同学遇到诛仙广告弹窗问题，使用Process Explorer（来自Sysinternals工具集）定位弹窗进程。该工具显示进程和句柄信息，拖动十字准星至广告窗口即可识别具体进程来源。

文章介绍了在树莓派 4B 上安装 Rocky Linux 并将其配置为小型服务器的过程。通过系统优化、Cockpit 管理面板的使用以及文件共享设置，实现了类似 NAS 的功能，并部署了容器化服务以提升灵活性和管理效率。

r/netsecstudents是一个Reddit社区，旨在帮助学生分享资源、提问和学习各种网络安全性知识。用户需遵守规则才能发帖，并有在线成员参与讨论。

“地理位置欺骗涉及伪造设备位置以绕过限制或进行欺诈。攻击者利用VPN、假GPS应用等手段改变位置信息。这对依赖地理位置的移动应用如流媒体和金融类服务构成威胁。通过检测模拟器、根权限设备及篡改环境等方法可有效阻止此类攻击。”

Location Spoofing or Geo Spoofing is the act of deliberately falsifying the geographical location of a device. This can be performed using various techniques such as GPS manipulation, tweaking OS settings, or by using specialized software that tricks apps into reporting incorrect location data. 

The post Stop Geo-Spoofing with Secure API Integration for Mobile Application appeared first on Security Boulevard.

SonicWall调查发现近期针对其Gen 7防火墙的Akira勒索软件攻击并非利用零日漏洞，而是通过已知漏洞CVE-2024-40766窃取设备凭证。建议用户更新固件、重置密码并禁用SSLVPN以提升安全。

SonicWall found no evidence of a new vulnerability after probing reports of a zero-day used in ransomware attacks. SonicWall investigated claims of a zero-day being used in ransomware attacks but found no evidence of any new vulnerability in its products. SonicWall launched the investigation after a surge in Akira ransomware attacks targeting Gen 7 firewalls with SSLVPN […]

Devin AI系统中隐藏的工具可将本地端口暴露至互联网，可能被攻击者利用间接提示注入攻击暴露敏感信息或创建后门访问。该工具允许Devin在开发或测试中将本地服务公开，但存在安全风险。攻击者可通过多阶段注入控制Devin创建Web服务器并暴露文件系统。漏洞已报告但未修复。

Today let’s explore Devin’s system prompt a bit more. Specifically, an interesing tool that I discovered when reading through it. Hidden in Devin’s capabilities is a tool that can open any local port to the public Internet. That means, with the right indirect prompt injection nudge, Devin can be tricked into publishing sensitive files or services for anyone to access. This tunneling feature can be invoked without a human in the loop.

文章探讨了如何通过分析性思维构建有效的合规体系,强调将其融入组织结构和日常运营的重要性。提出持续风险评估、事件准备和定期监控等方法,并指出GDPR等法规要求企业建立动态、跨学科且可衡量的合规机制,以应对不断变化的挑战。

2025年上半年勒索软件激增，CL0P、Akira和Qilin三大威胁行为者主导全球超千次攻击。CL0P擅长零日漏洞攻击，Akira针对制造业和关键行业，Qilin通过RaaS模式快速扩张。新威胁者如Dire Wolf等也浮现，数据窃取成主要手段。勒索软件生态化发展，企业需加强主动防御。

当前环境出现异常,需完成验证后方可继续访问。

悬镜再获工信部权威认可，入选信息技术应用创新典型解决方案！

Lansweeper 分析显示 Linux 桌面市场份额超 6%，多数据支持这一结论，并指出欧洲和北美在不同部门的应用情况。