Aggregator

Bad actors are leveraging browser notifications as a vector for phishing attacks to distribute malicious links by means of a new command-and-control (C2) platform called Matrix Push C2. "This browser-native, fileless framework leverages push notifications, fake alerts, and link redirects to target victims across operating systems," Blackfog researcher Brenda Robb said in a Thursday report. In

Zero-Day / Software SecurityThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Fr

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added a critical security flaw impacting Oracle Identity Manager to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerability in question is CVE-2025-61757 (CVSS score: 9.8), a case of missing authentication for a critical function that can result in pre-authenticated

A vulnerability was found in Microsoft Windows. It has been declared as critical. This affects an unknown part of the component Ancillary Function Driver for WinSock. Such manipulation leads to use after free. This vulnerability is referenced as CVE-2025-53147. The attack can only be performed from a local environment. No exploit is available. Applying a patch is advised to resolve this issue.

A vulnerability has been found in Microsoft Windows and classified as critical. Affected is an unknown function of the component Message Queuing. The manipulation leads to type confusion. This vulnerability is uniquely identified as CVE-2025-53143. The attack is possible to be carried out remotely. No exploit exists. Applying a patch is the recommended action to fix this issue.

A vulnerability was found in Microsoft Windows and classified as critical. Affected by this vulnerability is an unknown functionality of the component Message Queuing. The manipulation results in type confusion. This vulnerability was named CVE-2025-53144. The attack may be performed from remote. There is no available exploit. It is best practice to apply a patch to resolve this issue.

A vulnerability was found in Microsoft Windows. It has been classified as critical. Affected by this issue is some unknown functionality of the component Message Queuing. This manipulation causes type confusion. The identification of this vulnerability is CVE-2025-53145. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

注：本文是笔者工作过程中思考事物、认识事物，准备改造事物的手稿之一，因接下来的工作中，拟计划使其数字安全建设与

Новый фотонный транзистор, работающий на одиночных фотонах и гигагерцовых частотах, превращает кремниевое кольцо света в реальный «артефакт» для замена медленной электроники.

The Metasploit Framework has introduced a new exploit module targeting critical vulnerabilities in Fortinet’s FortiWeb Web Application Firewall (WAF). This module chains two recently disclosed flaws, CVE-2025-64446 and CVE-2025-58034, to achieve unauthenticated Remote Code Execution (RCE) with root privileges. The release follows reports of active exploitation in the wild, including “silent patches” and subsequent bypasses that have left many […]

The post Metasploit Adds Exploit Module for Recently Disclosed FortiWeb 0-Day Vulnerabilities appeared first on Cyber Security News.

Почему разделение на «цифровые» и «физические» угрозы больше не работает и как это влияет на защиту бизнеса.

人工智能已深度融入生产生活各领域，在提升效率、优化服务的同时，也因技术不确定性和发展迅速，衍生出数据滥用、算法偏见、隐私泄露等日益突出的伦理风险，迫切需要构建科学完备的伦理框架，引领人工智能向善发展。

近日，《深化智慧城市发展 推进全域数字化转型行动计划》正式发布，明确了推进城市全域数字化转型的思路与目标，并从六个方面系统规划了扎实推进转型的重点任务与具体举措，为城市数字化转型提供了行动指南。

低空经济作为国家战略性新兴产业，已连续两年被纳入政府工作报告。2025年3月，政府工作报告再次明确提出“推动低空经济等新兴产业安全健康发展”。低空智联网作为低空经济的重要基础设施，是推动其规模化落地、加速培育新质生产力的关键要素……

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

Манипуляции с митохондриями открывают дорогу терапии, способной не только поддерживать, но и потенциально разворачивать назад процессы клеточного увядания.

A former IT contractor from Ohio has admitted to launching a cyberattack against his employer’s network in retaliation for being terminated, federal prosecutors announced this week. Maxwell Schultz, 35, of Columbus, Ohio, pleaded guilty to computer fraud charges after leading a technical attack that locked thousands of employees out of their systems nationwide. On May […]

The post Fired Techie Admits Hacking Employer’s Network in Retaliation for Termination appeared first on Cyber Security News.

A vulnerability classified as critical was found in Microsoft Windows. Affected is an unknown function of the component Kernel. Executing manipulation can lead to untrusted pointer dereference. This vulnerability is handled as CVE-2025-59207. It is possible to launch the attack on the local host. There is not any exploit available. A patch should be applied to remediate this issue.