Aggregator

LockBit 5.0 服务器、IP及勒索域名遭泄露

看雪论坛作者ID：G0t1T

CTF密码学总卡关？30小时破局实战来了！

​从 L4 级无人驾驶的『思想汽车』到能走猫步的机器人，何小鹏用 AI 重塑生产力。

Research from the NCSC designed to eradicate vulnerability classes and make the top-level mitigations easier to implement.

攻击者利用该漏洞可在未授权条件下实现远程代码执行，获得目标服务器控制权限。

勒索攻击数量和赎金规模在2023年达峰

家暴是一个全球性问题。澳大利亚研究人员调查了常用抗抑郁药舍曲林(Sertraline)减少家暴的效果。研究人员从新南威尔士州 1738 名男性中随机挑选出 630 人，分别让他们服用舍曲林或安慰剂。这些人大多数都是有家暴前科的，是从社区矫正机构和法院招募来的。舍曲林是通过增强大脑中血清素功能去发挥作用，而血清素在调节冲动控制和情绪反应上发挥重要作用，因此这有助于缓解暴力行为中的一个关键驱动因素——无法冷静下来控制情绪。结果显示，服用 12 个月后舍曲林组再犯率（19.1%）低于安慰剂组（24.8%）；服用 24 个月后舍曲林组再犯率（28.2%）低于安慰剂组（35.7%）。服药更规律的男性 24 个月后再犯率降低 30%。

A vulnerability was found in Infinera MTC-9 version up to 22.x. It has been classified as critical. This affects an unknown part. The manipulation leads to server-side request forgery. This vulnerability is uniquely identified as CVE-2025-26487. The attack is possible to be carried out remotely. No exploit exists. Upgrading the affected component is recommended.

A vulnerability was found in Dassault Systèmes ENOVIA Collaborative Industry Innovator and classified as problematic. Affected by this issue is some unknown functionality. Executing manipulation can lead to cross site scripting. This vulnerability is handled as CVE-2025-12956. The attack can be executed remotely. There is not any exploit available.

A vulnerability has been found in Infinera MTC-9 up to 22.x and classified as problematic. Affected by this vulnerability is an unknown functionality of the component XML Handler. Performing manipulation results in denial of service. This vulnerability is known as CVE-2025-26489. Remote exploitation of the attack is possible. No exploit is available. The affected component should be upgraded.

A vulnerability, which was classified as critical, was found in Infinera MTC-9 up to 22.x. Affected is an unknown function of the component XML Handler. Such manipulation leads to improper authentication. This vulnerability is traded as CVE-2025-26488. The attack may be launched remotely. There is no exploit available. You should upgrade the affected component.

火绒安全终端防护数据月报（2025-11）

12月19日，广州不见不散，赶快报名呀~

Barts Health NHS Trust has revealed itself to be the latest victim of Cl0p’s Oracle EBS campaign

Perplexity разрабатывает трёхуровневую защиту для ИИ-агентов, сталкивающихся с хаотичным и опасным веб-контентом.

上周关注度较高的产品安全漏洞(20251201-20251207)

国家信息安全漏洞共享平台（以下简称CNVD）本周共收集、整理信息安全漏洞468个，其中高危漏洞230个、中危漏洞222个、低危漏洞16个。