Aggregator

In this mini-series I describe the solutions of my favorite tasks from this year’s Flare-On

Malvertising / Artificial IntelligenceThreat actors are leveraging bogus installers masquerading a

Threat actors are leveraging bogus installers masquerading as popular software to trick users into installing malware as part of a global malvertising campaign dubbed TamperedChef. The end goal of the attacks is to establish persistence and deliver JavaScript malware that facilitates remote access and control, per a new report from Acronis Threat Research Unit (TRU). The campaign, per the

error code: 521

HackerNews 编译，转载请注明出处： 常春藤名校普林斯顿大学近日发生重大数据泄露事件，所有曾在该校就读或毕业人员的个人信息均可能遭窃，受影响名单包括亚马逊创始人杰夫·贝索斯、美国前第一夫人米歇尔·奥巴马、美国国防部部长皮特・赫格塞思等政商界知名人士。 根据校方公告，11月10日外部攻击者入侵了普林斯顿大学发展事务处的数据库，该数据库存储着校友、捐赠者、教职员工、学生及家长等大学社区成员的信息。校方确认所有校友——包括曾入学但未毕业者——均在此次事件中受到影响。 泄露范围 作为全球最负盛名的研究型大学之一，普林斯顿培养了大量杰出人才：亚马逊CEO杰夫·贝索斯（1986届）、前第一夫人米歇尔·奥巴马（1986届）、谷歌前CEO埃里克·施密特（1976届）均位列其中。 更引人关注的是，美国现任国防部长皮特·赫格塞斯及八位最高法院大法官中的三位——塞缪尔·阿利托、埃琳娜·卡根和索尼娅·索托马约尔——的信息也可能遭泄露。 普林斯顿大学透露，此次信息泄露的受害者不仅包括校友，还涵盖校友配偶、学校捐赠者、学生家长以及历届和现任教职员工。 学校方面解释：“目前我们尚不清楚黑客具体查看或窃取了哪些信息。该数据库主要存储与学校筹款及校友联络相关的个人传记类信息，我们认为其中不包含密码、社会保障号码、信用卡信息或银行账户记录。” 攻击方式 据悉，攻击者通过钓鱼攻击获取了数据库访问权限。恶意攻击者通过电话锁定一名大学员工，冒充合法请求获取凭证后侵入系统。 这种社交工程手段与著名黑客组织Scattered Spider此前攻击英国零售商玛莎百货、美高梅度假村和凯撒娱乐的手法如出一辙。 普林斯顿大学表示，事件后，校方在24小时内成功阻断攻击，并已通报执法部门启动调查。 普林斯顿并非首所遭遇黑客入侵的常春藤盟校。今年 8 月底，哥伦比亚大学曾发生类似事件，近 90 万人信息被泄露，其中也包括大量往届校友。 顶尖高等教育机构往往是网络犯罪分子的目标。今年早些时候，一个勒索软件团伙声称对欧洲顶尖学府巴黎索邦大学发动了攻击。     消息来源：cybernews； 本文由 HackerNews.cc 翻译整理，封面来源于网络；转载请注明“转自 HackerNews.cc”并附上原文

Миллионам пользователей рекомендуется немедленно проверить версию своего программного обеспечения.

获评最高等级认证，是vivo构建可信AI生态的决心与实力。

题目概述Lambda-revenge是XCTF 2022的一道高难度逆向题目，是2020年lambda题目的加强版。题目采用Lambda演算（Lambda Calculus）作为核心，通过Church

A vulnerability, which was classified as problematic, has been found in danny-avila librechat up to 0.8.0-rc1. Affected by this issue is some unknown functionality of the component API Endpoint. Performing manipulation results in expected behavior violation. This vulnerability is cataloged as CVE-2025-8850. It is possible to initiate the attack remotely. There is no exploit available. It is advisable to upgrade the affected component.

A vulnerability was found in Cisco Identity Services Engine Software. It has been rated as problematic. This affects an unknown part of the component Web-based Management Interface. The manipulation leads to insufficient granularity of access control. This vulnerability is traded as CVE-2025-20305. It is possible to initiate the attack remotely. There is no exploit available. Upgrading the affected component is advised.

A vulnerability categorized as critical has been discovered in Cisco Identity Services Engine Software 3.4.0. This vulnerability affects unknown code of the component RADIUS. The manipulation results in incorrect comparison. This vulnerability is known as CVE-2025-20343. It is possible to launch the attack remotely. No exploit is available. It is advisable to upgrade the affected component.

A vulnerability identified as problematic has been detected in Cisco Identity Services Engine Software. This issue affects some unknown processing. This manipulation causes cross site scripting. This vulnerability is handled as CVE-2025-20289. The attack can be initiated remotely. There is not any exploit available. You should upgrade the affected component.

A vulnerability was found in Advantech DeviceOn and iEdge up to 2.0.2. It has been classified as critical. The affected element is an unknown function of the component Configuration File Handler. The manipulation leads to path traversal. This vulnerability only affects products that are no longer supported by the maintainer. This vulnerability is traded as CVE-2025-59171. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability was found in Advantech DeviceOn and iEdge up to 2.0.2. It has been declared as critical. The impacted element is an unknown function of the component Configuration File Handler. The manipulation results in path traversal. This vulnerability only affects products that are no longer supported by the maintainer. This vulnerability is known as CVE-2025-62630. It is possible to launch the attack remotely. No exploit is available.

A vulnerability described as critical has been identified in Advantech DeviceOn and iEdge up to 2.0.2. Impacted is an unknown function of the component Dashboard Label. Such manipulation leads to cross site scripting. This vulnerability only affects products that are no longer supported by the maintainer. This vulnerability is referenced as CVE-2025-64302. It is possible to launch the attack remotely. No exploit is available.

A vulnerability identified as problematic has been detected in IBM DB2 and DB2 Connect Server up to 11.1.4.7/11.5.9/12.1.3. The affected element is an unknown function. Performing manipulation results in uncontrolled memory allocation. This vulnerability is reported as CVE-2025-2534. The attack is possible to be carried out remotely. No exploit exists. You should upgrade the affected component.

A vulnerability labeled as critical has been found in IBM DB2 up to 10.5.11/11.1.4.7/11.5.9/12.1.3. The impacted element is an unknown function. Executing manipulation can lead to use of a key past its expiration date. This vulnerability appears as CVE-2025-33012. The attack may be performed from remote. There is no available exploit. The affected component should be upgraded.

A vulnerability marked as critical has been reported in IBM DB2 and DB2 Connect Server up to 10.5.11/11.1.4.7/11.5.9/12.1.3. This affects an unknown function. The manipulation leads to stack-based buffer overflow. This vulnerability is traded as CVE-2024-47118. It is possible to initiate the attack remotely. There is no exploit available. It is suggested to upgrade the affected component.

A vulnerability classified as problematic was found in IBM DB2 and DB2 Connect Server up to 11.5.9/12.1.3. Affected by this vulnerability is an unknown functionality. Such manipulation leads to allocation of resources. This vulnerability is uniquely identified as CVE-2025-36136. Local access is required to approach this attack. No exploit exists. Upgrading the affected component is advised.