Aggregator

Critical security alerts have been issued for Firebox firewall devices due to serious ten vulnerabilities. The vulnerabilities in WatchGuard, disclosed on December 4, 2025, span multiple severity levels and attack vectors. With several requiring urgent patching to prevent unauthorized code execution and information disclosure. The most critical vulnerabilities enable authenticated attackers to execute arbitrary code […]

The post Critical WatchGuard Firebox Vulnerabilities Let Attackers Bypass Integrity Checks and Inject Malicious Codes appeared first on Cyber Security News.

Recommended profiles to securely configure TLS for the most common versions and scenarios, with additional guidance for managing older versions.

A critical React2Shell (CVE-2025-55182) RCE flaw in React and Next.js is being actively exploited by China-nexus threat groups, prompting urgent patching and global mitigations.

The post Cloudflare Forces Widespread Outage to Mitigate Exploitation of Maximum Severity Vulnerability in React2Shell  appeared first on Security Boulevard.

A Home Office report has revealed racial bias in facial recognition technology used by police

Инсталляция Beeple в виде стаи роботов с головами знаменитостей стала хитом коллекционеров.

360斩获"金智奖"双奖项

任何使用AI进行问题分类、PR标记、代码建议或自动回复的仓库，都面临提示注入、命令注入、密钥泄露、仓库泄露和上游供应链泄露的风险。

速修复

Новое поколение подводных аппаратов обещает быть трудно обнаруживаемым сонарами и меньше травмировать морскую экосистему.

LockBit 5.0 服务器、IP及勒索域名遭泄露

看雪论坛作者ID：G0t1T

CTF密码学总卡关？30小时破局实战来了！

​从 L4 级无人驾驶的『思想汽车』到能走猫步的机器人，何小鹏用 AI 重塑生产力。

Research from the NCSC designed to eradicate vulnerability classes and make the top-level mitigations easier to implement.

攻击者利用该漏洞可在未授权条件下实现远程代码执行，获得目标服务器控制权限。

勒索攻击数量和赎金规模在2023年达峰

家暴是一个全球性问题。澳大利亚研究人员调查了常用抗抑郁药舍曲林(Sertraline)减少家暴的效果。研究人员从新南威尔士州 1738 名男性中随机挑选出 630 人，分别让他们服用舍曲林或安慰剂。这些人大多数都是有家暴前科的，是从社区矫正机构和法院招募来的。舍曲林是通过增强大脑中血清素功能去发挥作用，而血清素在调节冲动控制和情绪反应上发挥重要作用，因此这有助于缓解暴力行为中的一个关键驱动因素——无法冷静下来控制情绪。结果显示，服用 12 个月后舍曲林组再犯率（19.1%）低于安慰剂组（24.8%）；服用 24 个月后舍曲林组再犯率（28.2%）低于安慰剂组（35.7%）。服药更规律的男性 24 个月后再犯率降低 30%。

A vulnerability was found in Infinera MTC-9 version up to 22.x. It has been classified as critical. This affects an unknown part. The manipulation leads to server-side request forgery. This vulnerability is uniquely identified as CVE-2025-26487. The attack is possible to be carried out remotely. No exploit exists. Upgrading the affected component is recommended.

A vulnerability was found in Dassault Systèmes ENOVIA Collaborative Industry Innovator and classified as problematic. Affected by this issue is some unknown functionality. Executing manipulation can lead to cross site scripting. This vulnerability is handled as CVE-2025-12956. The attack can be executed remotely. There is not any exploit available.