Aggregator

MuddyWater Hides Malware With Game Delay Technique
Iranian nation-state hackers took inspiration from a mobile phone time-killing mainstay, say security researchers who spotted hackers downloading malware masquerading as the Snake video game. A callback to the game isn't nostalgia, say researchers at Eset.

Chinese Developer Formerly Employed by Company Suspected of Data Theft
South Korea's biggest online retailer, Coupang, said a five-month breach exposed personal data pertaining to 34 million customers, and only came to light after it received an extortion demand. Police said a former developer at the company, a Chinese national who fled the country, is a suspect.

Industry Wants to Stick to Voluntary Measures
U.S. telecommunications networks are still vulnerable to foreign intrusion, national security and industry panelists told senators during a Tuesday hearing, warning that China and other adversaries are refining long-term access into American infrastructure.

Class Action Litigation Alleges Web Trackers Shared Patient Data With Tech Firms
Kaiser Permanente has agreed to pay up to $47.5 million to settle litigation stemming from its use of tracking codes in its websites, patient portals and mobile apps. Claimants alleged the trackers unlawfully shared patients' information with third parties, including Google and Microsoft.

好的，我现在需要帮用户总结一篇文章的内容，控制在100字以内，并且不需要特定的开头。首先，我得仔细阅读用户提供的内容。 这篇文章的标题是“XWORM INFECTION FROM EMAIL ATTACMENT”，日期是2025年11月19日。内容提到了Zip文件是密码保护的，网站有新的密码方案，密码在“about”页面。然后列出了四个相关的文件，包括IOC、邮件、流量 pcap 和恶意软件，都是zip格式。 用户的要求是用中文总结，控制在100字以内。我需要提取关键信息：XWorm蠕虫通过邮件附件传播，附件是加密的Zip文件，包含恶意软件和相关数据。此外，密码可以在网站的“about”页面找到。 现在我要把这些信息浓缩成一句话，确保不超过100字，并且直接描述文章内容。可能的结构是：日期、事件、传播方式、附件情况、包含的内容和密码位置。 检查一下字数是否合适，并确保没有遗漏重要信息。最后，确保语言简洁明了。 2025年11月19日报告XWorm蠕虫通过电子邮件附件传播感染事件，相关文件为加密Zip格式，需访问网站"about"页面获取密码解密。

База VIRE объединила данные из каждого уголка Земли: от морских глубин до кишечника.

2025年的11月末，湾湾地区称未来三年投入逾10亿新台币（约3200万美元），打造一支“无需GPS、抗干扰

2025年10月26日，泰国总理阿努廷·查恩维拉库尔与特朗普在东盟峰会期间签署了一份关键矿产谅解备忘录，旨在加

pwn的技巧都跟魔法一样，一瞬间，发生了很多事情，如果不了解原理，那真的很难理解了，这里和大家分享一下 强网杯S9 pwn-bph题目的魔法般的技巧（内含glibc-2.39源码&反汇编进行辅助讲解）

从0到1通过外网渗入内网的一种思路及溯源分析，拉了坨大的，将就着看吧

Government Opts for Voluntary Frameworks Over Enforceable Safeguards
Australia's federal government has quietly shelved the mandatory AI guardrails it proposed just three months ago, replacing enforceable requirements with voluntary guidance in its National AI Plan released today.

Chinese Developer Formerly Employed by Company Suspected of Data Theft
South Korea's biggest online retailer, Coupang, said a five-month breach exposed personal data pertaining to 34 million customers, and only came to light after it received an extortion demand. Police said a former developer at the company, a Chinese national who fled the country, is a suspect.

Industry Wants to Stick to Voluntary Measures
U.S. telecommunications networks are still vulnerable to foreign intrusion, national security and industry panelists told senators during a Tuesday hearing, warning that China and other adversaries are refining long-term access into American infrastructure.

Class Action Litigation Alleges Web Trackers Shared Patient Data With Tech Firms
Kaiser Permanente has agreed to pay up to $47.5 million to settle litigation stemming from its use of tracking codes in its websites, patient portals and mobile apps. Claimants alleged the trackers unlawfully shared patients' information with third parties, including Google and Microsoft.

Industrial Video & Controlが提供するLongwatchには、コードインジェクションの脆弱性が存在します。

Новый вариант Water Saci сочетает сложную многоступенчатую цепочку заражения и почти вирусное распространение через WhatsApp.

Mirion Medicalが提供するEC2 Software NMIS BioDoseには、複数の脆弱性が存在します。