Aggregator

A vulnerability classified as problematic has been found in Nextcloud Contacts App up to 5.5.3/6.0.5/7.2.4. This vulnerability affects unknown code of the component CSS File Parser. Performing manipulation of the argument organisation/title results in cross site scripting. This vulnerability is reported as CVE-2025-66554. The attack is possible to be carried out remotely. No exploit exists. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in Nextcloud Talk up to 20.1.7/21.1.1. Impacted is an unknown function of the component Conversation Handler. The manipulation leads to authorization bypass. This vulnerability is traded as CVE-2025-66556. It is possible to initiate the attack remotely. There is no exploit available. It is advisable to upgrade the affected component.

A vulnerability has been found in libexpat up to 2.4.3 and classified as critical. Impacted is the function doProlog. Performing manipulation results in integer overflow. This vulnerability is identified as CVE-2022-23990. The attack can only be performed from the local network. There is not any exploit available. The affected component should be upgraded.

A vulnerability categorized as very critical has been discovered in Oracle Communications MetaSolv Solution 6.3.1. Impacted is an unknown function of the component User Interface. The manipulation results in integer overflow. This vulnerability is known as CVE-2022-23990. It is possible to launch the attack remotely. No exploit is available. It is advisable to upgrade the affected component.

A vulnerability was found in Entr'ouvert Lasso 2.5.1/2.8.2. It has been rated as critical. Affected is the function lasso_node_impl_init_from_xml of the component SAML Response Handler. Performing manipulation results in type confusion. This vulnerability is known as CVE-2025-47151. Remote exploitation of the attack is possible. No exploit is available.

F6: Хакеры используют LLM для создания «чистого» кода загрузчиков

根据发表在《PLOS Medicine》期刊上的一项研究，减少吸烟并不能消除心血管疾病风险，必须完全戒烟才能改善健康。研究人员使用了包含 323,826 名成年人的数据集，相比从不吸烟者，每日吸烟 2-5 支的人会增加心血管疾病和全因死亡风险；每日吸烟 11-15 支会显著增加心血管疾病和全因死亡风险。只有戒烟才能逐渐降低风险，风险的最大降幅出现在戒烟后前 10 年内。戒烟 20 年后，既往吸烟者的相对风险比当前吸烟者低 80% 以上。

QuasarRAT, initially surfacing in 2014 under the alias xRAT, began its lifecycle as a legitimate remote administration tool for Windows environments. Over the last decade, however, its open-source nature and accessibility have facilitated its transformation into a potent instrument for cybercriminals. The malware is built on the .NET Framework using C#, making it highly adaptable […]

The post QuasarRAT Core Functionalities Along with Encrypted Configuration and Obfuscation Techniques Exposed appeared first on Cyber Security News.

本文从基础开始，逐步过渡到更非常规的屏蔽线上广告的方法。前几种方法简单直接且应用广泛，后面的则需要更多配置和维护，但能在传统方法失效的地方拦截广告。

Cary, North Carolina, USA, 8th December 2025, CyberNewsWire

Cary, North Carolina, USA, 8th December 2025, CyberNewsWire

The post INE Earns G2 Winter 2026 Badges Across Global Markets appeared first on Security Boulevard.

Почему США выступают против личных VPN.

Picus Security explains why relying on LLM-generated attack scripts is risky and how an agentic approach maps real threat intel to safe, validated TTPs. Their breakdown shows how teams can turn headline threats into reliable defense checks without unsafe automation. [...]

As artificial intelligence systems become more autonomous, their ability to interact with digital tools and data introduces complex new risks. Recognizing this challenge, researchers from NVIDIA and Lakera AI have collaborated on a new paper proposing a unified framework for the safety and security of these advanced “agentic” systems. The proposal addresses the shortcomings of […]

The post NVIDIA and Lakera AI Propose Unified Framework for Agentic System Safety appeared first on Cyber Security News.

Cortical Labs начала продажи настольного биокомпьютера на основе живых нейронов.

Clop ransomware stole data from Barts Health NHS after exploiting a zero-day in its Oracle E-Business Suite. Barts Health NHS confirmed that Clop ransomware group stole data by exploiting zero-day CVE-2025-61882 in its Oracle E-Business Suite. The cybercrime group added the organization to its dark web data leak site and leaked the stolen information. The […]

为加速提升我国相关领域人员驾驭开源情报的能力， 第16期全国开源情报能力培训班将于2026年1月25日在北京开班。

美国今年发布了新的《国家安全战略2025》。