Aggregator

A vulnerability was found in Microsoft Internet Explorer up to 6. It has been classified as critical. This affects an unknown part of the component JavaScript. The manipulation leads to memory corruption. This vulnerability is uniquely identified as CVE-2006-5579. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability, which was classified as problematic, has been found in Microsoft Internet Explorer 7. Affected by this issue is some unknown functionality of the component URL Handler. The manipulation with the input %A0 leads to an unknown weakness. This vulnerability is handled as CVE-2006-5544. The attack may be launched remotely. Furthermore, there is an exploit available. It is recommended to replace the affected component with an alternative.

微软斥资 750 亿美元收购动视暴雪，一个目的是帮助增加旗下订阅服务 Xbox Game Pass 的订阅量，但数据显示这一目标落空了。截至 6 月的一年中，Game Pass 收入增长了

微软斥资 750 亿美元收购动视暴雪，一个目的是帮助增加旗下订阅服务 Xbox Game Pass 的订阅量，但数据显示这一目标落空了。截至 6 月的一年中，Game Pass 收入增长了 5.7%，低于 11% 的内部目标。Game Pass 未能增加玩家对购买 Xbox 硬件的兴趣，促使微软将其第一方游戏作品移植到 PS5 等竞争对手的平台。微软还希望收购动视能吸引其它游戏开发商租用其云服务 Azure 的服务器，但这种局面没有发生。动视的年度大作《使命召唤》系列至今仍然使用的是亚马逊 AWS 和 Google 的 GCP 云服务，没有迁移到母公司旗下的 Azure。甚至微软在六年前收购的职业社交网络 LinkedIn，其使用的云服务至今没有迁移到 Azure。

Как Meta решила главную проблему машинного перевода с системой Seamless.

Трекеры и опасные разрешения обнаружены в последней версии приложения.

Украденные данные всплыли на преступных форумах и привлекли внимание общественности.

Cisco announced Cisco AI Defense, a pioneering solution to enable and safeguard AI transformation within enterprises. As AI technology advances, new safety concerns and security threats are emerging at an unprecedented speed which existing security solutions are unprepared to protect against. Cisco AI Defense is purpose-built for enterprises to develop, deploy and secure AI applications with confidence. “Business and technology leaders can’t afford to sacrifice safety for speed when embracing AI,” said Jeetu Patel, EVP and … More →

The post Cisco AI Defense safeguards against the misuse of AI tools appeared first on Help Net Security.

A vulnerability classified as critical has been found in Microsoft Office and OneNote. This affects an unknown part. The manipulation leads to improper restriction of names for files and other resources. This vulnerability is uniquely identified as CVE-2025-21402. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability was found in NeoMutt and classified as problematic. Affected by this issue is some unknown functionality of the component Header Field Handler. The manipulation of the argument In-Reply-To leads to insufficient verification of data authenticity. This vulnerability is handled as CVE-2024-49394. The attack may be launched remotely. There is no exploit available.

奇安信集团漏洞补丁运营团队文档信息奇安信集团最新补丁库（V6版本：2025.01.15.1，V10版本：2025.01.15.1000）已发布，本次更新推送了34个微软安全补丁，修复了142个安全漏洞

宁波城市大模型创新联合体成立，360引领城市发展新纪元

Сервисы корпорации под угрозой из-за рекламы нарушающих правил приложений.

HP Wolf highlighted novel techniques used by attackers to bypass email protections, including embedding malicious code inside images and utilizing GenAI

IT-Harvest launched HarvestIQ.ai, a platform featuring two AI assistants designed to redefine how professionals navigate the cybersecurity landscape. The Analyst AI provides access to IT-Harvest’s comprehensive database of 4,070 cybersecurity vendors, offering users instant insights into market players, trends, and innovations. Meanwhile, the Architect AI empowers users with tailored guidance on cybersecurity products, leveraging IT-Harvest’s in-depth analysis of over 11,300 products to help organizations make informed decisions about their cybersecurity strategies. “HarvestIQ.ai is a game-changer … More →

The post HarvestIQ.ai provides actionable insights for cybersecurity professionals appeared first on Help Net Security.

A vulnerability classified as critical has been found in Azzaroco WP SuperBackup Plugin up to 2.3.3 on WordPress. This affects an unknown part. The manipulation leads to unrestricted upload. This vulnerability is uniquely identified as CVE-2024-56064. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

Минобороны ФРГ покидает X на фоне политического конфликта.

网络安全是一个知识密集型行业，对每一个行业从业者来说，都需要通过不断学习，及时获取国内外最新的网络安全动态，了解先进安全技术发展趋势。为了回馈广大读者一直以来对安全牛的关注和支持，我们在2025年新年

新闻速览•六部门印发《关于完善数据流通安全治理 更好促进数据要素市场化价值化的实施方案》•TikTok在美关停在即，特朗普有意挽救•CISA发布人工智能网络安全协作手册•勒索软件新伎俩曝光：90分钟内