Aggregator
Please support the site operations by clicking ads.
千star开源项目存在恶意代码
⚡ Weekly Recap: Fortinet Exploited, China's AI Hacks, PhaaS Empire Falls & More
CVE-2025-24893 | xwiki-platform up to 15.10.10/16.4.0 eval injection (GHSA-rr6p-3pfg-562j / EUVD-2025-4562)
EVALUSION Campaign Using ClickFix Technique to deploy Amatera Stealer and NetSupport RAT
In November 2025, a new malware campaign emerged that combines social engineering tricks with advanced stealing tools. The attack starts when criminals trick users into running commands through the Windows Run window, a technique known as ClickFix. Once users follow these instructions, their computers become infected with Amatera Stealer, an advanced piece of malware designed […]
The post EVALUSION Campaign Using ClickFix Technique to deploy Amatera Stealer and NetSupport RAT appeared first on Cyber Security News.
Critical RCE Vulnerabilities in AI Inference Engines Exposes Meta, Nvidia and Microsoft Frameworks
As artificial intelligence infrastructure rapidly expands, critical security flaws threaten the backbone of enterprise AI deployments. Security researchers at Oligo Security have uncovered a series of dangerous Remote Code Execution (RCE) vulnerabilities affecting major AI frameworks from Meta, NVIDIA, Microsoft, and PyTorch projects, including vLLM and SGLang. The vulnerabilities, collectively termed “ShadowMQ,” stem from the […]
The post Critical RCE Vulnerabilities in AI Inference Engines Exposes Meta, Nvidia and Microsoft Frameworks appeared first on Cyber Security News.
$244000000 за шифрование. VPN-инфраструктура теперь — бесплатный банкомат для хакеров
Akira
You must login to view this content
Комплексная ИБ промышленных предприятий – приглашаем на вебинар от «Инфосистемы Джет»
Iranian SpearSpecter Attacking High-Value Officials Using Personalized Social Engineering Tactics
A dangerous espionage campaign is targeting senior government and defense officials worldwide. Iranian hackers are using fake conference invitations and meeting requests to trick victims. The attackers spend weeks building trust before striking. They reach out through WhatsApp to make their messages look legitimate. This campaign, known as SpearSpecter, combines patience with powerful malware to […]
The post Iranian SpearSpecter Attacking High-Value Officials Using Personalized Social Engineering Tactics appeared first on Cyber Security News.
Bargain hunters urged to stay alert to cyber scams ahead of holiday shopping season
Cybersecurity Findings Management: What You Need to Know
Cybersecurity findings management is the process of identifying, prioritizing, tracking, and remediating security issues uncovered through vulnerability scans, audits, or assessments.
The post Cybersecurity Findings Management: What You Need to Know appeared first on Security Boulevard.