Aggregator

混合的网络环境、人工智能驱动的网络攻击，将大幅提升网络安全的重要性。

混合的网络环境、人工智能驱动的网络攻击，将大幅提升网络安全的重要性。

混合的网络环境、人工智能驱动的网络攻击，将大幅提升网络安全的重要性。

混合的网络环境、人工智能驱动的网络攻击，将大幅提升网络安全的重要性。

混合的网络环境、人工智能驱动的网络攻击，将大幅提升网络安全的重要性。

混合的网络环境、人工智能驱动的网络攻击，将大幅提升网络安全的重要性。

Security researchers have uncovered a new attack campaign by the North Korean state-sponsored APT group Kimsuky, also known as “Black Banshee.” The group, active since at least 2012, has been observed employing advanced tactics and malicious scripts in their latest cyber espionage efforts targeting countries such as South Korea, Japan, and the United States. The […]

The post North Korean Kimsuky Hackers Deploy New Tactics and Malicious Scripts in Recent Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A vulnerability has been found in Event Post Plugin up to 5.9.9 on WordPress and classified as problematic. This vulnerability affects the function events_list of the component Shortcode Handler. The manipulation leads to cross site scripting. This vulnerability was named CVE-2025-2167. The attack can be initiated remotely. There is no exploit available.

A vulnerability was found in vcita CRM and Lead Management Plugin up to 2.7.4 on WordPress and classified as problematic. This issue affects the function vCitaMeetingScheduler/vCitaSchedulingCalendar of the component Shortcode Handler. The manipulation leads to cross site scripting. The identification of this vulnerability is CVE-2024-13702. The attack may be initiated remotely. There is no exploit available.

A vulnerability, which was classified as critical, was found in Active Products Tables for WooCommerce Plugin up to 1.0.6.7 on WordPress. This affects the function get_smth. The manipulation leads to improper authentication. This vulnerability is uniquely identified as CVE-2025-1514. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability has been found in Total Upkeep Plugin up to 1.16.10 on WordPress and classified as critical. This vulnerability affects the function proc_open of the component Setting Handler. The manipulation of the argument compression_level leads to command injection. This vulnerability was named CVE-2025-2257. The attack can be initiated remotely. There is no exploit available.

A vulnerability was found in Xenioushk BWL Advanced FAQ Manager Plugin up to 2.1.4 on WordPress. It has been rated as critical. Affected by this issue is the function baf_set_notice_status. The manipulation leads to missing authorization. This vulnerability is handled as CVE-2024-13801. The attack may be launched remotely. There is no exploit available.

A vulnerability was found in contrid Newsletters Plugin up to 4.9.9.7 on WordPress. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to cross site scripting. This vulnerability was named CVE-2025-2009. The attack can be initiated remotely. There is no exploit available.

一图读懂《工业互联网安全分类分级管理办法》

近期，中国消费者协会陆续收到消费者声称因“免密支付”功能导致账户资金被盗刷的投诉。为切实保护消费者财产安全，提升风险防范意识，中国消费者协会提醒广大消费者，网络购物谨慎使用手机“免密支付”功能，避免因账户权限过度开放而引发资金损失。

今年年初，DeepSeek推出的DeepSeek-R1大语言模型，标志着中国AI技术自主创新的重大突破。这不仅推动了业界对大模型研发模式的重新思考，也引发了国际市场对中国AI产业发展前景的高度关注。

就中国网络安全产业联盟发布报告披露美国开展网络攻击和监听窃密活动，外交部发言人郭嘉昆25日表示，中方对报告曝光的美方恶意网络活动表示严重关切，敦促美方立即停止有关行为，特别是停止利用全球供应链实施恶意网络活动。

中国网络安全产业联盟立足网络安全专业视角，坚持科学、客观原则，根据全球网络安全厂商、研究机构和学者等披露的调查分析研究成果，编制《美情报机构针对全球移动智能终端实施的监听窃密活动》报告。

国家数据局局长刘烈宏24日在中国发展高层论坛2025年年会上表示，国家数据局将充分调动社会各方力量，积极推动高质量数据集建设，持续增加数据供给，推动“人工智能+”行动赋能千行百业，打造包容开放的创新环境。

近日，工业和信息化部印发《工业互联网安全分类分级管理办法》。