Aggregator

今年以来，中央网信办开展专项行动，整治涉企网络“黑嘴”与算法典型问题，彰显守护良好网络生态、优化营商环境的坚定决心。

经公安部计算机信息系统安全产品质量监督检验中心检测，40款移动应用存在违法违规收集使用个人信息情况。

近日，国务院办公厅印发《电子印章管理办法》。《办法》的出台进一步规范了电子印章的管理和应用，强化其法律效力，推动各领域、各系统广泛使用电子印章，对促进电子印章在政务活动及社会化服务中实现跨地区跨部门互信互认具有重要意义。

意见反馈截止日期为2025年11月29日。

Операция SpearSpecter показала, что даже ваш личный чат может стать точкой входа.

恭喜Nu1L战队！🏆

比特币币值一个月内跌掉了一年内的所有涨幅。10 月 6 日比特币币值创下了 126,251 美元的历史记录，但四天后特朗普的关税言论引发了全球市场暴跌，上周日比特币币值跌至了 93,714 美元，跌破了去年年底的币值水平，抹掉了过去一年的所有涨幅，下跌逾 3.2 万美元。加密货币资产管理公司 Bitwise Asset Management 的首席投资官 Matthew Hougan 称，过去一个月大卖家悄悄撤离了，市场失去了推动价格上涨的资金流动支撑。此次抛售是长期持有者获利了结、机构资金外流、宏观经济不确定性，以及杠杆多头头寸被清零等多种因素共同作用的结果。

OpenAI has been named an Emerging Leader in Gartner’s 2025 Innovation Guide for Generative AI Model Providers. The recognition reflects our enterprise momentum, with over 1 million companies building with ChatGPT.

Does your chatbot know too much? Here's why you should think twice before you tell your AI companion everything.

低权限注入致SAP全盘沦陷，亟需修复。

看雪论坛作者ID：孤恒

打造属于自己的RK工具+基于自定义规则的HIPS系统

近期，360安全大脑监测发现一种僵尸网络正隐秘发起大规模DDoS攻击，分析其通信协议后确认为HitlerBot僵尸网络新变种。

Китайцы нашли на Луне то, чего там не могло быть.

A vulnerability identified as problematic has been detected in Digiwin EasyFlow GP up to 5.8.11.1.0810112/8.1.1.2. This vulnerability affects unknown code. The manipulation leads to insufficiently protected credentials. This vulnerability is documented as CVE-2025-13163. The attack can be initiated remotely. There is not any exploit available.

A vulnerability labeled as problematic has been found in Digiwin EasyFlow GP up to 5.8.11.1.0810112. This issue affects some unknown processing. The manipulation results in insufficiently protected credentials. This vulnerability is reported as CVE-2025-13164. The attack can be launched remotely. No exploit exists.

A vulnerability classified as critical has been found in Sublime Sublime Text. Affected by this vulnerability is an unknown functionality. This manipulation causes improper authentication. This vulnerability is handled as CVE-2025-56503. The attack can be initiated remotely. There is not any exploit available.

A vulnerability was found in Dromara dataCompare up to 1.0.1 and classified as critical. The affected element is the function DbConfig of the file src/main/java/com/vince/xq/project/system/dbconfig/service/DbconfigServiceImpl.java of the component JDBC URL Handler. Executing manipulation can lead to injection. This vulnerability is tracked as CVE-2025-13268. The attack can be launched remotely. Moreover, an exploit is present.

A vulnerability was found in Chunghwa Telecom TenderDocTransfer. It has been rated as problematic. Affected by this issue is some unknown functionality. Performing manipulation results in cross-site request forgery. This vulnerability is cataloged as CVE-2025-13282. It is possible to initiate the attack remotely. There is no exploit available. Upgrading the affected component is advised.