Aggregator

分享一篇文章。

2025年6月3日，深瞳漏洞实验室监测到一则谷歌-Chrome组件存在越界读写漏洞的信息，漏洞编号：CVE-2025-5419，漏洞威胁等级：高危。

The latest version of the 'Crocodilus' Android malware has introduced a new mechanism that adds a fake contact on the infected device's contact list to deceive victims. [...]

Всё начинается с незаметного сигнала, который легко пропустить.

好多APT

A vulnerability was found in OpenSSH 7.9. It has been classified as critical. This affects an unknown part of the component scp. The manipulation leads to improper input validation. This vulnerability is uniquely identified as CVE-2019-6111. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

Бумажные направления снова в моде, а телефоны молчат уже больше недели.

立即查看详情 →

A vulnerability was found in Arris VIP1113 up to 2025-05-30. It has been classified as critical. Affected is an unknown function of the component KreaTV SDK. The manipulation leads to improper protection of alternate path. This vulnerability is traded as CVE-2025-49162. It is possible to launch the attack on the physical device. There is no exploit available.

A recent post on an underground forum has brought renewed attention to the escalating arms race between cybercriminals and anti-bot security vendors. The solicitation, offering USD 1,500 for a working bypass of PerimeterX (PX) anti-fraud protections—specifically targeting the “hold CAPTCHA” on Microsoft’s signup.live.com—highlights the growing commoditization and sophistication of CAPTCHA evasion toolkits. Exploiting Anti-Bot Weaknesses […]

The post Threat Actors Target PerimeterX CAPTCHA to Automate Microsoft Account Creation appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

De NAVO-top in Den Haag kan de geschiedenis ingaan, als het moment waarop Europa opstond en verantwoordelijkheid nam. Die hoop sprak minister Ruben Brekelmans gisteren uit. Dat deed hij tijdens ‘Debat in de Stad’, onderdeel van de NAVO door Nederland tour. Hier kwamen zo’n 600 geïnteresseerden in actuele geopolitiek, experts, betrokkenen bij de lokale politiek en studenten op af.

Это в тысячи раз мощнее допустимой нормы. Но на что не пойдешь ради просмотров?

Interactive Brokers is warning customers to be on high alert due to a wave of scams involving fraudsters posing as company representatives. Interactive Brokers (IBKR) is a global brokerage firm that lets investors trade stocks, options, futures, and other assets on international markets. In a message sent to clients on June 2, the company said it is seeing more cases of criminals impersonating its employees, branding, and email addresses in order to trick people into … More →

The post Scammers are impersonating Interactive Brokers: Here’s what you need to know appeared first on Help Net Security.

5G в России: дорого строить, некуда внедрять, незачем подключать.

Индустрия годами спорила, как называть хакеров, пока Microsoft не положила бардаку конец.

A vulnerability was found in Arris VIP1113 up to 2025-05-30. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component KreaTV SDK. The manipulation leads to use of hard-coded cryptographic key . This vulnerability is known as CVE-2025-49164. Attacking locally is a requirement. There is no exploit available.

A vulnerability was found in Arris VIP1113 up to 2025-05-30. It has been rated as critical. Affected by this issue is some unknown functionality of the file /usr/bin/gunzip of the component KreaTV SDK. The manipulation leads to improper protection of alternate path. This vulnerability is handled as CVE-2025-49163. It is possible to launch the attack on the local host. There is no exploit available.

A vulnerability has been found in PHPGurukul Nipah Virus Testing Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file manage-phlebotomist.php. The manipulation of the argument pid leads to cross-site request forgery. This vulnerability was named CVE-2023-6474. The attack can be initiated remotely. Furthermore, there is an exploit available.

A vulnerability has been found in Accredible Credential.net and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to improper control of resource identifiers. This vulnerability is known as CVE-2023-50872. The attack can be launched remotely. There is no exploit available. The real existence of this vulnerability is still doubted at the moment. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in SEMCMS 3.9. This affects an unknown part. The manipulation leads to sql injection. This vulnerability is uniquely identified as CVE-2023-48863. The attack needs to be initiated within the local network. There is no exploit available.