Aggregator

美国天文学会呼吁全世界禁止地面可见的太空广告，称会干扰到地面的天文观测。美国联邦法律禁止太空广告，但美国天文学会担心其它国家的公司可能会尝试投放太空广告。俄罗斯公司 Avant Space 在 2024 年 4 月发射了一颗 3U 立方体卫星测试太空广告技术。另一家俄罗斯公司 StartRocket 于 2019 年宣布与百事可乐俄罗斯子公司签订合同，使用太空广告推广能量饮料。百事美国表示在探索性测试后它终止了太空广告计划。

美国天文学会呼吁全世界禁止地面可见的太空广告，称会干扰到地面的天文观测。美国联邦法律禁止太空广告，但美国天文学会担心其它国家的公司可能会尝试投放太空广告。俄罗斯公司 Avant Space

本期周报简介：1.Linux系统通过权限细分保障安全，应采用技术如RBAC、审计策略限制并监控用户行为，降低风险 2. 随着数据复杂度增加，数据库规范化（如3范式）的重要性愈发凸显 3. 面对多源漏洞情报，自动化匹配结合资产管理平台是趋势

本期周报简介：1.Linux系统通过权限细分保障安全，应采用技术如RBAC、审计策略限制并监控用户行为，降低风险 2. 随着数据复杂度增加，数据库规范化（如3范式）的重要性愈发凸显 3. 面对多源漏洞情报，自动化匹配结合资产管理平台是趋势

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

A vulnerability was found in Mtp-Target 1.2.2. It has been declared as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to memory corruption. This vulnerability is known as CVE-2005-1401. The attack can be launched remotely. Furthermore, there is an exploit available.

A previously unknown threat actor has been observed copying the tradecraft associated with the Kremlin-aligned Gamaredon hacking group in its cyber attacks targeting Russian-speaking entities. The campaign has been attributed to a threat cluster dubbed GamaCopy, which is assessed to share overlaps with another hacking group named Core Werewolf, also tracked as Awaken Likho and PseudoGamaredon.

Cyber Espionage / Threat IntelligenceA previously unknown threat actor has been observed copying t

GitLab has released critical security updates for its Community Edition (

GitLab has released critical security updates for its Community Edition (CE) and Enterprise Edition (EE), addressing several vulnerabilities, including a high-severity cross-site scripting (XSS) flaw.  The patched versions, 17.8.1, 17.7.3, and 17.6.4, are now available, and GitLab strongly recommends all self-managed installations upgrade immediately. Vulnerabilities Addressed XSS Vulnerability in File Rendering The most critical issue […]

The post GitLab Security Update – Patch for XSS Vulnerability in File Rendering appeared first on Cyber Security News.

上周关注度较高的产品安全漏洞(20250120-20250126)

国家信息安全漏洞共享平台（以下简称CNVD）本周共收集、整理信息安全漏洞304个，其中高危漏洞127个、中危漏洞154个、低危漏洞23个。