Aggregator

Users of WhatsApp Desktop on Windows Face Code Execution Risk Via Python

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
4 months ago

A critical security risk has emerged for Windows users of WhatsApp Desktop who also have Python installed. Attackers can exploit a flaw in how WhatsApp Desktop handles .pyz (Python archive) files, delivering arbitrary code execution on the victim’s machine with a single click. Researchers have discovered that a maliciously crafted .pyz file—normally used to bundle Python applications—can be disguised […]

The post Users of WhatsApp Desktop on Windows Face Code Execution Risk Via Python appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Divya

ShadowCaptcha Exploits WordPress Sites to Spread Ransomware, Info Stealers, and Crypto Miners

不安全
4 months ago
大规模网络犯罪活动ShadowCaptcha利用超100个被黑WordPress网站将用户引导至伪造CAPTCHA页面，通过ClickFix社交工程策略传播信息窃取器、勒索软件和加密货币挖矿程序。攻击链通过恶意JavaScript重定向至假Cloudflare或Google CAPTCHA页面，并分两路执行：一路利用Windows Run对话框部署恶意软件，另一路引导用户保存并运行HTML应用以部署勒索软件。攻击者还使用反调试技术和DLL侧加载隐藏恶意行为。多数被黑网站位于澳大利亚、巴西等国，涉及技术、医疗等多个行业。建议加强用户培训和WordPress安全防护以应对威胁。

ShadowCaptcha Exploits WordPress Sites to Spread Ransomware, Info Stealers, and Crypto Miners

The Hackers News
4 months ago
A new large-scale campaign has been observed exploiting over 100 compromised WordPress sites to direct site visitors to fake CAPTCHA verification pages that employ the ClickFix social engineering tactic to deliver information stealers, ransomware, and cryptocurrency miners. The large-scale cybercrime campaign, first detected in August 2025, has been codenamed ShadowCaptcha by the Israel National
The Hacker News

暴露在热浪下会加速衰老

Solidot
4 months ago
根据发表在《nature climate change》期刊上的一项研究，暴露在热浪下会加速衰老。研究人员分析了 24,922 名台湾成年人 15 年（2008–2022）的健康数据，发现暴露在两年的热浪下可能会加速生物衰老 8-12 天。论文主要作者、香港大学助理教授 Cui Guo 表示，数字虽小但意义重大，因为全世界的热浪已经持续了几十年。今天世界各地都面临创记录的高温。

暴露在热浪下会加速衰老

不安全
4 months ago
研究发现热浪暴露加速生物衰老：两年热浪可能使生物年龄增加8-12天。研究分析了台湾24,922名成年人15年的健康数据，并指出全球热浪持续数十年，高温记录频破。

Git vulnerability leading to RCE is being exploited by attackers (CVE-2025-48384)

Help Net Security
4 months ago

CVE-2025-48384, a recently patched vulnerability in the popular distributed revision control system Git, is being exploited by attackers. Details about the attacks are not public, but the confirmation of exploitation comes from the US Cybersecurity and Infrastructure Security Agency (CISA), which added the flaw to its Known Exploited Vulnerabilities catalog on Monday. About CVE-2025-48384 “[CVE-2025-48384] stems from a mismatch in how Git reads versus writes configuration values containing control characters,” DataDog researchers explained. “The vulnerability … More →

The post Git vulnerability leading to RCE is being exploited by attackers (CVE-2025-48384) appeared first on Help Net Security.

Zeljka Zorz

Managed ad