Aggregator

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Linux Kernel vulnerability to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Google Chromium V8 Out-of-Bounds Read and Write Vulnerability, tracked as CVE-2023-0386, to its Known Exploited Vulnerabilities (KEV) catalog. The vulnerability, CVE-2023-0386 (CVSS score: 7.8), is an improper ownership vulnerability in the Linux kernel that […]

Cato CTRL uncovers new WormGPT variants on Telegram powered by jailbroken Grok and Mixtral. Learn how cybercriminals jailbreak top LLMs for uncensored, illegal activities in this latest threat research.

一款面向酒店商家的垂类 AI Agent，轻投入实现智能服务效能升级。

Из-за одного символа теперь сливаются корпоративные базы, документы и RCE.

Qualys researchers have unearthed two local privilege escalation vulnerabilities (CVE-2025-6018, CVE-2025-6019) that can be exploited in tandem to achieve root access on most Linux distributions “with minimal effort.” About the vulnerabilities (CVE-2025-6018, CVE-2025-6019) CVE-2025-6018 affects the Pluggable Authentication Modules (PAM) configuration of openSUSE Leap 15 and SUSE Linux Enterprise 15, and allows an unprivileged local attacker – for example, an attacker who logs in via a remote SSH session – to gain the “allow_active” privileges … More →

The post Chaining two LPEs to get “root”: Most Linux distros vulnerable (CVE-2025-6018, CVE-2025-6019) appeared first on Help Net Security.

A highly coordinated phishing campaign surfaced, targeting U.S. citizens by impersonating various state Departments of Motor Vehicles (DMVs). This widespread attack utilized SMS phishing, or “smishing,” as its primary delivery vector, bombarding victims with alarming text messages about fictitious unpaid toll violations. These messages, often spoofed to appear as originating from local DMV numbers traced […]

The post DMV-Style Phishing Scams Target U.S. Citizens to Harvest Sensitive Information appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

伊朗网络安全部门禁止官员使用联网设备，原因是担心遭到以色列的跟踪或黑客攻击。伊朗官方通讯社 Fars 通讯社报道，伊朗官员及其保镖已被告知不得使用任何连接公共互联网或电信网络的设备。

微塑料指的是尺寸小于 5 毫米的微小塑料颗粒。纳米塑料则更加微小。这两种大小的塑料微粒都是由较大型的塑料垃圾通过化学分解产生。饮用水、海产品与空气中都曾检出过微塑料和纳米塑料。海水入侵是一个自然过程，在这个过程中，海水会混合进陆地上的地下水资源之中，世界各地的沿海地区都大量报道了这一现象。研究表明，海水入侵是导致沿海地区地下蓄水层中各种污染物（也包括微塑料）高浓度存在的元凶之一。分析发现，与居住在毗邻微塑料污染水平更低的美国沿海县居民相比，居住在有着非常高的微塑料污染水平的水域沿岸的美国沿海县居民有着明显更高的二型糖尿病、冠状动脉疾病以及中风发病率：调整后二型糖尿病患病率高出 18%，冠状动脉疾病的患病率高出 7%，中风的发病率高出 9%。

VMware has officially announced the general availability of VMware Cloud Foundation (VCF) 9.0, marking a significant leap in private cloud technology designed to meet the demands of AI, data-intensive workloads, and modern enterprise operations. For years, organizations faced a stark choice: embrace the agility of public cloud or retain the control of on-premises infrastructure, often […]

The post VMware Unveils Cloud Foundation 9.0 With AI and Next-Gen Workloads appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Jumio launched Jumio Liveness Premium with advanced deepfake detection, the company’s most advanced biometric liveness detection solution to date. Jumio’s premium solution leverages a patented Jumio technology, combining randomized color sequences and AI-driven analysis to confirm human presence in real time, effectively stopping spoofing attacks before they impact businesses. With this release, Jumio adds another layer of security to the recently launched Jumio Liveness, an advanced, in-house liveness detection technology that expands beyond traditional presentation … More →

The post Jumio Liveness Premium combats deepfakes and injection attacks appeared first on Help Net Security.

Пока ты читаешь этот материал, кто-то уже слушает твои порты.

人在认识世界、改造世界的实践活动中自会形成种种具有积累价值和交流价值的思想和认识，文章总结便是用来完善、固定和

一图读懂 | 国家标准GB/T 45574—2025《数据安全技术 敏感个人信息处理安全要求》

为应对当前层出不穷、花样翻新的电信网络诈骗手法，切实提升群众防骗意识和识骗能力，公安部刑侦局、国家反诈中心根据最新电信网络诈骗犯罪发案形势特点，编写了《2025版防范电信网络诈骗宣传手册》，今天正式向社会发布。

近期，CNCERT监测发现一种名为HTTPBot的DDoS僵尸网络。该僵尸网络控制者通过钓鱼等方式诱导Windows主机用户运行伪装成记事本等程序的木马文件实现劫持Windows主机的目的，通过C&C控制服务器向被劫持主机发送控制指令……

构建可信数据空间成为打破数据流通困境、释放数据要素价值的关键。可信数据空间作为一种新型的数据流通利用基础设施，通过技术、规则和生态的共同作用，确保数据的安全性、可靠性和高效性，为数据要素的市场化配置提供了有力支撑。

关键词网络攻击网络安全公司 Netcraft 报告发现，一种基于黑产平台 Hacklink 的SEO投毒攻击正

关键词网络攻击Scattered Spider正将攻击目标从英国零售商转向美国保险公司，引发了Google威胁

关键词数据泄露Zoomcar 是一家总部位于印度的汽车共享和自驾汽车租赁公司。