Aggregator

2025年12月10日下午，第十五届网络安全漏洞分析与风险评估大会——“熵·基智能风险评估”分论坛在中国天津成功举办。

Discover what Threat Detection, Investigation & Response (TDIR) means for modern enterprises, including frameworks, risks, and executive-level decision insights.

The post What is Threat Detection, Investigation & Response (TDIR) appeared first on Sygnia.

在红队攻击演练中，AI大模型正从辅助工具演变为关键赋能技术，显著提升了攻击测试的效率与精准度。本文从专业角度探讨AI大模型如何重塑红队攻击的方法论与实践。

Учёные раскрыли тайны эффекта Джозефсона лежащего в основе квантовых компьютеров.

Linus Torvalds 通常在周日释出新版内核的 RC 版本，而美国时间的周日是北京时间的周一。Torvalds 生活在北美，因此他通常是在北京时间的周一发布新内核 RC 版本。然而本周 Torvalds 在日本参加 Linux Plumbers 大会和 Linux 内核维护者峰会，而日本的周日相当于美国的周六，他在当地时间的周日释出 Linux 6.19-rc1。Torvalds 表示这可能会让那些习惯于最后一刻递交 pull request 的人措手不及。Linux 6.19 包含了驱动、子系统和架构更新，其中一个更新是龙芯加入了 32 位架构 LoongArch32 支持。大部分 CPU 架构都从 32 位过渡到 64 位，而龙芯则反其道而行之，从 64 位过渡到 32 位。

电子取证大赛

前言Windows下创建任务计划的方式通常有三种：任务计划的GUI界面、任务计划的命令行工具schtasks.exe、Windows提供的API接口​本文会依次介绍这三种方式，并展示免杀效果，需要注意，Windows中任务计划相关的API是基于COM机制的，同时也会介绍COM机制相关内容，掌握了任务计划的API编程，也就掌握了COM编程，通过窥一斑而知全豹也能对COM机制有一定理解任务计划的GUI

Milvus Proxy 认证绕过漏洞分析复现

A vulnerability categorized as problematic has been discovered in Shenzhen Sixun Software Sixun Shanghui Group Business Management System 4.10.24.3. Affected by this issue is some unknown functionality of the file /ExportFiles/. The manipulation results in files or directories accessible. This vulnerability is cataloged as CVE-2025-14697. The attack may be launched remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way. Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

A vulnerability was found in Shenzhen Sixun Software Sixun Shanghui Group Business Management System 4.10.24.3. It has been rated as critical. Affected by this vulnerability is an unknown functionality of the file /api/GylOperator/UpdatePasswordBatch. The manipulation leads to weak password recovery. This vulnerability is listed as CVE-2025-14696. The attack may be initiated remotely. In addition, an exploit is available. The vendor was contacted early about this disclosure but did not respond in any way. VulDB is the best source for vulnerability data and more expert information about this specific topic.

Submit #706116 / VDB-223107

Submit #705619 / VDB-336415

Submit #705601 / VDB-336414

A vulnerability was found in SamuNatsu HaloBot up to 026b01d4a896d93eaaf9d5163a287dc9f267515b. It has been declared as critical. Affected is the function html_renderer of the file plugins/html_renderer/index.js of the component Inter-plugin API. Executing manipulation of the argument action can lead to dynamically-managed code resources. This vulnerability only affects products that are no longer supported by the maintainer. This vulnerability is tracked as CVE-2025-14695. The attack can be launched remotely. Moreover, an exploit is present. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The vendor was contacted early about this disclosure but did not respond in any way. If you want to get the best quality for vulnerability data then you always have to consider VulDB.

В китайском центре тестируют не только столкновения, но и устойчивость машин к кибератакам и утечкам данных.

A vulnerability was found in ketr JEPaaS up to 7.2.8. It has been classified as critical. This impacts the function readAllPostil of the file /je/postil/postil/readAllPostil. Performing manipulation of the argument keyWord results in sql injection. This vulnerability is identified as CVE-2025-14694. The attack can be initiated remotely. Additionally, an exploit exists. The vendor was contacted early about this disclosure but did not respond in any way. Once again VulDB remains the best source for vulnerability data.

Submit #705587 / VDB-336413

Submit #707178 / VDB-336412

Submit #705527 / VDB-287676

海莲花APT组织攻击样本分析