Aggregator

A vulnerability, which was classified as critical, was found in Project Worlds Online Time Table Generator 1.0. This affects an unknown part of the file /student/index.php. The manipulation of the argument e leads to sql injection. This vulnerability is uniquely identified as CVE-2025-2659. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability has been found in Project Worlds Online Time Table Generator 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/index.php. The manipulation of the argument e leads to sql injection. This vulnerability was named CVE-2025-2660. The attack can be initiated remotely. Furthermore, there is an exploit available.

Officials Look for Positive PR Stories as Putin's War Drags On
Russian authorities regularly trumpet the arrest and sentencing of citizens who offer hacking support to Ukrainian forces. Experts say the extent to which official crime reports can be trusted remains unclear, especially as officials need to look tough on the "Ukrainian threat."

Settlement Follows Federal Investigation Into Data Leak and Ransomware Attack
A Texas mental healthcare provider's failure to conduct a comprehensive risk analysis resulted in a $225,000 federal fine after regulators investigated a data leak followed by a ransomware attack in 2023. Deer Oaks Behavioral Health also must implement a corrective action plan.

Cybersecurity Compliance Vendor A-Lign Plans Global Expansion With Backing From Hg
Cybersecurity compliance firm A-LIGN has received a majority investment from Hg, a top tech-focused private equity firm. The deal supports A-LIGN's global ambitions to deliver SOC 2 and other compliance audits and leverages Hg’s expertise in scaling data and AI-driven services.

China's Hack-For-Hire Scene Disgorges Another Leak
The Chinese nation-state threat actor tracked as Salt Typhoon is operated by a clutch of private firms whose clients include multiple Chinese government agencies, finds analysis of leaked data by Spy Cloud. Researchers found a spreadsheet listing buyers, sellers and financial transaction details.

Zenni Optical introduces Zenni ID Guard, a privacy-focused lens technology that reflects near-infrared light to help disrupt unwanted tracking. It’s a shield for your face, built right into your everyday glasses, all at an accessible price. The growing use of infrared-based biometric surveillance and facial recognition, often used without your knowledge, has sparked global privacy concerns. Zenni ID Guard is pioneering an accessible eyewear solution to disrupt this unwanted tracking, identifiable by its subtle iridescent … More →

The post Zenni ID Guard disrupts unwanted infrared facial tracking appeared first on Help Net Security.

文章讨论了人工智能（AI）的局限性及其在职场中的应用问题。尽管AI在某些任务上表现出色，但其能力被夸大和误用的情况普遍存在。人类对AI的过度期待和错误的人格化倾向导致了决策失误和资源浪费。文章强调了AI无法替代人类在创造力、情感理解、道德判断等领域的独特价值，并指出盲目采用AI可能导致企业长期发展的困境。

IPinfo launched Residential Proxy Detection API, extending its privacy detection capabilities to help security and fraud prevention teams identify one of the most evasive forms of anonymized IP traffic. Residential Proxy Detection is also available via downloadable database and Snowflake integration. Residential proxy networks have become a critical vector for fraud, account takeovers, and large-scale abuse. Unlike VPNs or datacenter proxies, residential proxies route traffic through real, residential IPs, masking the true origin of requests … More →

The post IPinfo boosts privacy detection capabilities with Residential Proxy Detection API appeared first on Help Net Security.

A vulnerability was found in Microsoft Windows. It has been rated as critical. This issue affects some unknown processing of the component Universal Print Management Service. The manipulation leads to use after free. The identification of this vulnerability is CVE-2025-47986. It is possible to launch the attack on the local host. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability classified as critical was found in Microsoft Windows. Affected by this vulnerability is an unknown functionality of the component Routing/Remote Access Service. The manipulation leads to heap-based buffer overflow. This vulnerability is known as CVE-2025-48824. The attack can be launched remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability was found in Microsoft Windows. It has been classified as critical. Affected is an unknown function of the component Ancillary Function Driver for WinSock. The manipulation leads to untrusted pointer dereference. This vulnerability is traded as CVE-2025-49661. Local access is required to approach this attack. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability was found in Microsoft Visual Studio. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to link following. The identification of this vulnerability is CVE-2025-49739. The attack may be initiated remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability was found in Microsoft Windows and classified as critical. This issue affects some unknown processing of the component Event Tracing. The manipulation leads to use after free. The identification of this vulnerability is CVE-2025-49660. An attack has to be approached locally. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability was found in Microsoft Windows up to Server 2025. It has been rated as critical. Affected by this issue is some unknown functionality of the component Media. The manipulation leads to use after free. This vulnerability is handled as CVE-2025-49682. The attack may be launched remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability classified as critical has been found in SAP NetWeaver Application Server for Java 7.50. Affected is an unknown function. The manipulation leads to deserialization. This vulnerability is traded as CVE-2025-42963. It is possible to launch the attack remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability was found in Microsoft Visual Studio Code Python Extension. It has been classified as problematic. This affects an unknown part. The manipulation leads to trust boundary violation. This vulnerability is uniquely identified as CVE-2025-49714. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability classified as critical was found in SAP S4HANA and SCM 4CORE 102 up to CM 700. This vulnerability affects unknown code of the component Characteristic Propagation. The manipulation leads to code injection. This vulnerability was named CVE-2025-42967. The attack can be initiated remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

Одна статья — и ваши данные уже на чёрном рынке.

A vulnerability was found in Microsoft Windows 11 24H2/Server 2025. It has been classified as problematic. Affected is an unknown function of the component Secure Kernel Mode. The manipulation leads to processor optimization removal or modification of security-critical code. This vulnerability is traded as CVE-2025-48810. It is possible to launch the attack on the local host. There is no exploit available. It is recommended to apply a patch to fix this issue.