Aggregator

A vulnerability was found in Linux Kernel up to 6.1.131/6.6.83/6.12.19/6.13.7. It has been classified as problematic. Affected is the function load_microcode_amd. The manipulation leads to improper validation of array index. This vulnerability is traded as CVE-2025-21991. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.12.19/6.13.7 and classified as critical. This issue affects some unknown processing of the component AMD GPU. The manipulation leads to null pointer dereference. The identification of this vulnerability is CVE-2025-21990. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

近日，笔者发现一起以法国内政部出具的车辆信息文件为诱饵的恶意活动，该攻击利用网络钓鱼手段，诱导受害者执行恶意批处理脚本，进而部署隐秘的远控木马以实现对目标系统的长期控制。

Attackers target a familiar industry, law professionals, by hiding the infostealer in ads delivered via Google-based malvertising.

Linux cyber threats may be less common than Windows ones, but they can be equally if not more damaging. Defending against these requires proactive efforts. Eric Parker, a popular YouTube blogger and malware analyst, recently showed his approach to investigating and collecting intelligence on Linux malware. Here is a recap of his video.  How to […]

The post How to Hunt and Investigate Linux Malware  appeared first on ANY.RUN's Cybersecurity Blog.

ИИ ставит новый вызов для финтеха.

Cisco warns admins to patch a critical Cisco Smart Licensing Utility (CSLU) vulnerability, which exposes a built-in backdoor admin account now used in attacks. [...]

Ведомство устанавливает жёсткие сроки для провайдеров.

Mozilla has officially launched Firefox 137 with crucial security fixes aimed at addressing several high-severity vulnerabilities reported by security researchers. As part of its April 1, 2025, Mozilla Foundation Security Advisory (MFSA 2025-20), the foundation detailed three significant Common Vulnerabilities and Exposures (CVEs), which could have permitted attackers to exploit users’ machines through various means, […]

The post Firefox 137 Launches with Patches for High-Severity Security Flaws appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A privilege escalation vulnerability in Google Cloud Platform (GCP), dubbed “ImageRunner,” was recently discovered and fixed. The flaw, which Tenable Research brought to light, potentially allowed attackers to exploit Google Cloud Run permissions and access sensitive data stored in private container images. Discovering the ImageRunner Vulnerability The vulnerability hinged on improper permission handling for identities […]

The post Google Cloud Platform Vulnerability Exposes Sensitive Data to Attackers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

In today’s digital landscape, understanding your organization’s attack surface is crucial for maintaining robust cybersecurity. To effectively manage and mitigate the cyber-risks hiding in modern attack surfaces, it’s important to adopt an attacker-centric approach. In this article, we will be diving deeper into a company’s attack surface, what might have been forgotten and overlooked during the day-to-day rush and how cybersecurity professionals can regain the momentum and overview with the help of external attack surface … More →

The post How to map and manage your cyber attack surface with EASM appeared first on Help Net Security.

In this guest blog post, learn about six commonly missed AWS 'blind spots' that could lead to risk in your cloud infrastructure.

The post The Overlooked Six | AWS Security Blind Spots appeared first on SentinelOne.

Yarn tests fail consistently at the 27-second mark. The usual suspects are swiftly eliminated. A deep dive is taken to comb through traces, only to be derailed into an unexpected crash investigation.

在Cacti 1.2.28及以前版本中存在一个命令注入漏洞，该漏洞允许已认证用户在Web服务器上创建任意PHP文件，从而可能导致远程代码执行。

Румынские взломщики не спрашивают разрешения, вторгаясь по SSH.

Utimaco launched Quantum Protect, the Post Quantum Cryptography application package for its u.trust General Purpose HSM (Hardware Security Modules) Se-Series. The advent of quantum computers poses a threat to today’s cryptographic landscape. A cryptanalytically relevant quantum computer that could break common public key schemes such as RSA or ECC is expected by 2030. That may seem far away, but organizations need to plan their migration to Post Quantum Cryptography (PQC) now in order to stay … More →

The post Utimaco releases Quantum Protect solution appeared first on Help Net Security.

声明：文章中涉及的程序(方法)可能带有攻击性，仅供安全研究与教学之用，读者将其信息做其他用途，由用户承担全部

声明：文章中涉及的程序(方法)可能带有攻击性，仅供安全研究与教学之用，读者将其信息做其他用途，由用户承担全部

声明：文章中涉及的程序(方法)可能带有攻击性，仅供安全研究与教学之用，读者将其信息做其他用途，由用户承担全部

声明：文章中涉及的程序(方法)可能带有攻击性，仅供安全研究与教学之用，读者将其信息做其他用途，由用户承担全部