Aggregator

New guidelines can help an organization determine ways to incorporate AI into its operations while mitigating cybersecurity risks.

Злоумышленники спрятали вирус в файлах, которые принято считать абсолютно безопасными.

Audio streaming service SoundCloud has suffered a breach and has been repeatedly hit by denial of service attacks, the company confirmed on Monday. In the days leading up to the confirmation, users accessing SoundCloud through VPNs reported connection failures and error messages. It has now been revealed that these connectivity issues were due to configuration changes made by SoundCloud in the wake of the attacks, and that the company is working on resolving them. The … More →

The post SoundCloud breached, hit by DoS attacks appeared first on Help Net Security.

European law enforcement authorities dismantled a fraud network operating call centers in Ukraine that scammed victims across Europe out of more than 10 million euros. [...]

A new information stealer called SantaStealer has emerged as a serious threat to Windows users worldwide. This malware-as-a-service tool is being aggressively marketed through Telegram channels and underground hacker forums, with plans for full release before the end of 2025. The malware represents a rebranding of the earlier BluelineStealer, reflecting the evolving nature of the […]

The post SantaStealer Attacks Users to Exfiltrates Sensitive Documents, Credentials, and Wallet Data appeared first on Cyber Security News.

AI-assisted coding and AI app generation platforms have created an unprecedented surge in software development. Companies are now facing rapid growth in both the number of applications and the pace of change within those applications. Security and privacy teams are under significant pressure as the surface area they must cover is expanding quickly while their staffing levels remain largely

记录下thl靶场的靶机渗透，共20个靶机的详细渗透过程，里面对各种渗透提权payload进行了详细的解释刨析，希望能对刚入门渗透的热爱安全的师傅带来帮助

Устройство Pocket Lab попало в Книгу рекордов Гиннесса: оно запускает LLM на 120 млрд параметров локально.

A vulnerability marked as critical has been reported in Milestone Systems XProtect VMS. This impacts an unknown function of the component MIP Webhooks API. This manipulation causes missing authorization. This vulnerability is tracked as CVE-2025-0836. The attack is possible to be carried out remotely. No exploit exists. It is suggested to upgrade the affected component.

慢雾 MistTrack 助力数字资产安全合规落地。

关键词漏洞Plesk for Linux 中发现了一个严重的安全漏洞，可能允许用户在受影响的服务器上获取 ro

关键词漏洞一款名为PCPcat的新型恶意软件，通过针对性利用 Next.js 和 React 框架中的高危漏洞

本月初安全研究人员披露了编号为 CVE-2025-55182、危险等级 10/10 的 React Server 高危漏洞，该漏洞利用的成功率几乎能达到 100%，攻击者可以远程执行代码。在漏洞披露几个小时内，中国、伊朗、朝鲜的黑客组织以及网络犯罪组织就开始大规模利用该漏洞远程执行代码、部署后门和挖掘加密货币。亚马逊的安全团队称，中国黑客组织 Earth Lamia 和 Jackpot Panda 在利用该漏洞。Palo Alto Networks 的 Unit 42 称受害者超过 50 个。地下黑客论坛有大量关于 CVE-2025-55182 的讨论，有分享扫描工具链接、概念验证攻击代码(PoC) 以及相关工具的经验帖。

Threat actors have begun to exploit two newly disclosed security flaws in Fortinet FortiGate devices, less than a week after public disclosure. Cybersecurity company Arctic Wolf said it observed active intrusions involving malicious single sign-on (SSO) logins on FortiGate appliances on December 12, 2025. The attacks exploit two critical authentication bypasses (CVE-2025-59718 and CVE-2025-59719

今天以美国几个部门的AI战略为例，演示快速生成文章的思维导图。

Трамп усиливает давление на картели и обещает новые шаги в борьбе с опасным наркотиком.

速修复

速修复