Aggregator

The browser has become the main interface to GenAI for most enterprises: from web-based LLMs and copilots, to GenAI‑powered extensions and agentic browsers like ChatGPT Atlas. Employees are leveraging the power of GenAI to draft emails, summarize documents, work on code, and analyze data, often by copying/pasting sensitive information directly into prompts or uploading files.  Traditional

A new threat is targeting movie lovers who search for the latest films online. Cybercriminals are now using the popularity of Leonardo DiCaprio’s new film, One Battle After Another, to spread the dangerous Agent Tesla malware. What appears to be a simple movie download actually contains a series of hidden PowerShell scripts that install a […]

The post Beware of Fake Leonardo DiCaprio Movie Torrent File Drops Agent Tesla Malware appeared first on Cyber Security News.

关注高级攻防对抗技术热点，研究对手技术进行高级威胁模拟，研判攻击安全发展方向。

为了能抓到包，无数安全研究人员使出浑身解数，我们可以按照OSI七层模型或TCP/IP四层模型，将这些方法进行粗略的分类。

新型安卓病毒能远程锁机、偷拍并实时监控屏幕。

文末投递简历

看雪论坛作者ID：霜降白羽

A vulnerability has been found in Mozilla Firefox up to 145 and classified as critical. Affected by this issue is some unknown functionality. This manipulation causes memory corruption. The identification of this vulnerability is CVE-2025-14332. It is possible to initiate the attack remotely. There is no exploit available. The affected component should be upgraded.

A vulnerability was found in Mozilla Thunderbird up to 145 and classified as critical. This affects an unknown part. Such manipulation leads to memory corruption. This vulnerability is referenced as CVE-2025-14332. It is possible to launch the attack remotely. No exploit is available. It is suggested to upgrade the affected component.

A vulnerability was found in Mozilla Firefox up to 145. It has been classified as critical. This vulnerability affects unknown code. Performing manipulation results in memory corruption. This vulnerability is identified as CVE-2025-14333. The attack can be initiated remotely. There is not any exploit available. Upgrading the affected component is recommended.

A vulnerability was found in Mozilla Thunderbird up to 145. It has been declared as critical. This issue affects some unknown processing. Executing manipulation can lead to memory corruption. This vulnerability is tracked as CVE-2025-14333. The attack can be launched remotely. No exploit exists. It is recommended to upgrade the affected component.

A vulnerability was found in Mozilla Firefox up to 145. It has been rated as problematic. Impacted is an unknown function of the component Request Handler Component. The manipulation leads to permissive cross-domain policy with untrusted domains. This vulnerability is listed as CVE-2025-14331. The attack may be initiated remotely. There is no available exploit. Upgrading the affected component is advised.

Новая инфраструктура сократит обучение ИИ на месяцы.

MITRE has unveiled its 2025 Common Weakness Enumeration (CWE™) Top 25 Most Dangerous Software Weaknesses list, highlighting the root causes behind 39,080 Common Vulnerability and Exposure (CVE™) records this year. These prevalent flaws, which are often simple to detect and exploit, enable attackers to seize system control, pilfer sensitive data, or cripple applications. Developers, security […]

The post MITRE Releases Top 25 Most Dangerous Software Weaknesses of 2025 appeared first on Cyber Security News.

美国2026财年国防授权法案网络安全政策关键要点

OpenAI旗下模型的网络攻防能力正在快速提升

CISA has ordered U.S. federal agencies to patch a critical GeoServer vulnerability now actively exploited in XML External Entity (XXE) injection attacks. [...]

A vulnerability marked as critical has been reported in Campay Woocommerce Payment Gateway Plugin up to 1.2.2 on WordPress. This vulnerability affects unknown code. This manipulation causes authorization bypass. The identification of this vulnerability is CVE-2025-12883. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability classified as problematic was found in Premmerce Brands for WooCommerce Plugin up to 1.2.13 on WordPress. The affected element is the function saveBrandsSettings of the component Setting Handler. Executing manipulation can lead to missing authorization. This vulnerability is tracked as CVE-2025-12783. The attack can be launched remotely. No exploit exists.

A vulnerability described as problematic has been identified in Better Elementor Addons Plugin up to 1.5.4 on WordPress. Affected is an unknown function of the component Slider Widget. The manipulation results in cross site scripting. This vulnerability was named CVE-2025-12830. The attack may be performed from remote. There is no available exploit.