Aggregator

今日暂未更新资讯~
更多最新文章，请访问SecWiki

Инвесторы в панике, но Илон уверен — это просто временные трудности.

In the rapidly evolving world of cybersecurity, organizations are confronted with increasingly sophisticated threats that demand a coordinated and multi-layered defense approach. The days of relying on isolated security tools are long gone, as modern attack vectors now target various facets of enterprise infrastructure simultaneously. To effectively counter these threats, organizations must integrate Digital Forensics, […]

The post Building A Unified Security Strategy: Integrating Digital Forensics, XDR, And EDR For Maximum Protection appeared first on Cyber Security News.

Alleged Sale of U.S. Payment Card Data

The Evolving role of the Chief Information Security Officer (CISO) has transcended its roots in technical oversight to become a cornerstone of organizational strategy. As digital transformation accelerates, fueled by cloud computing, artificial intelligence, and IoT, CISOs grapple with a dual mandate: safeguarding assets while enabling innovation. Cyber threats, now more sophisticated and frequent, demand […]

The post The Evolving Role of the CISO – Balancing Risk and Innovation in the Digital Age appeared first on Cyber Security News.

A significant supply chain attack targeting cryptocurrency users. The official XRPL (Ripple) NPM package, which serves as the JavaScript SDK for the XRP Ledger, was compromised with malicious code designed to steal cryptocurrency private keys, potentially affecting hundreds of thousands of applications. On April 21, 2025, at 20:53 GMT, Aikido Intel’s security monitoring system detected […]

The post Ripple XPRL Official NPM Package Hijacked To Inject Private Key Stealing Malware appeared first on Cyber Security News.

欧盟委员会周三认定美国科技巨头苹果和 Meta 违反了欧盟的《数字市场法（DMA）》义务，分别处以 5 亿欧元和 2 亿欧元的罚款。欧盟委员会认为，苹果阻止开发者引导用户前往 App Store 以外的渠道获取更便宜的服务或交易，因此对苹果公司开罚。Meta 则因其付费换隐私的系统而被罚，即用户必须付费才能避免数据被收集，或同意与 Meta 旗下平台 Facebook 和 Instagram 共享数据，才能继续免费使用服务。欧盟认为 Meta 没有向用户提供个性化程度较低但等效的平台版本，且也未赋予用户自由同意其个人数据被合并使用的权利。

Blue Shield of California disclosed it suffered a data breach after exposing protected health information of 4.7 million members to Google's analytics and advertisement platforms. [...]

In a disturbing trend, cybercriminals, predominantly from Chinese underground networks, are exploiting Near Field Communication (NFC) technology to perpetrate large-scale fraud at ATMs and Point-of-Sale (POS) terminals. According to cyber threat intelligence analysts at Resecurity, numerous banks, FinTech companies, and credit unions have reported a surge in NFC-related fraud in Q1 2025, with damages exceeding […]

The post Hackers Exploit NFC Technology to Steal Money from ATMs and POS Terminals appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A vulnerability, which was classified as problematic, has been found in Mang Board WP Plugin up to 1.8.6 on WordPress. Affected by this issue is some unknown functionality. The manipulation of the argument board_header/board_footer leads to cross site scripting. This vulnerability is handled as CVE-2025-3435. The attack may be launched remotely. There is no exploit available.

A vulnerability classified as problematic was found in ImageMagick up to 7.1.1-43. Affected by this vulnerability is an unknown functionality of the component MIFF Image Handler. The manipulation of the argument packet_size leads to incorrect calculation of buffer size. This vulnerability is known as CVE-2025-46393. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic has been found in ImageMagick up to 7.1.1-43. Affected is the function SetQuantumFormat of the component MIFF Image Handler. The manipulation leads to incorrect calculation of buffer size. This vulnerability is traded as CVE-2025-43965. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Tenda AC9 15.03.05.14_multi. It has been rated as critical. This issue affects some unknown processing of the file /goform/WifiWpsStart. The manipulation leads to stack-based buffer overflow. The identification of this vulnerability is CVE-2025-45429. The attack may be initiated remotely. There is no exploit available.

A vulnerability was found in Tenda AC9 15.03.05.14_multi. It has been declared as critical. This vulnerability affects unknown code of the file /goform/SetSysAutoRebbotCfg. The manipulation of the argument rebootTime leads to stack-based buffer overflow. This vulnerability was named CVE-2025-45428. The attack can be initiated remotely. There is no exploit available.

A vulnerability was found in Tenda AC9 1.0/15.03.05.14. It has been classified as critical. This affects an unknown part of the file /goform/WifiBasicSet. The manipulation of the argument Security leads to stack-based buffer overflow. This vulnerability is uniquely identified as CVE-2025-45427. It is possible to initiate the attack remotely. There is no exploit available.

Bacon Redux: Pig butchering and other serious scams still thriving, despite crackdowns in Dubai and Myanmar

The post Asian Scam Farms: ‘Industrial Scale,’ Warns UN Report appeared first on Security Boulevard.

Currently trending CVE - Hype Score: 1 - PyTorch is a Python package that provides tensor computation with strong GPU acceleration and deep neural networks built on a tape-based autograd system. In version 2.5.1 and prior, a Remote Command Execution (RCE) vulnerability exists in PyTorch when loading a model using ...

Currently trending CVE - Hype Score: 2 - An improper authentication control vulnerability exists in AiCloud. This vulnerability can be triggered by a crafted request, potentially leading to unauthorized execution of functions. Refer to the 'ASUS Router AiCloud vulnerability' section on the ASUS Security Advisory for ...

Currently trending CVE - Hype Score: 1 - In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format This can lead to out of bounds writes since frames of this type were not taken into account when calculating the size of the ...