Aggregator

Chrome 高危漏洞，官方紧急修复

看雪论坛作者ID：村口曹师傅

🔥八月狂欢警报拉响！BSRC全域众测燥起来！

A total of 396 compromised Microsoft SharePoint systems have been identified globally, affecting 145 organizations across 41 countries in the wake of the ToolShell zero-day vulnerability

De Explosieven Opruimingsdienst Defensie vernietigde 71 explosieven, waarvan 33 in het centrum van het Gelderse Malden. De projectielen uit de Tweede Wereldoorlog zijn aangetroffen tijdens graafwerkzaamheden. Een overzicht van Defensieoperaties in de week van 23 tot en met 29 juli 2025.

IBM’s yearly report finds that a data breach now costs U.S. organizations more than $10 million for recovery.

The post Research shows data breach costs have reached an all-time high appeared first on CyberScoop.

挪威智能家居系统公司 Futurehome 在申请破产后，向其产品 Smarthub II 等推送了固件，移除了设备本地功能，将基本功能置于付费墙后，强推订阅制，除非客户订阅年费，否则设备基本功能都无法使用。Futurehome 的 Smarthub 最早是在 2016 年推出的，此后一直以一次性买断的方式销售其智能家居系列产品，包括智能恒温器、智能照明、智能火灾报警器和一氧化碳报警器。但在申请破产之后，该公司现在要求客户以每年 1,188 挪威克朗（约 116.56 美元）的订阅费使用基本功能。Futurehome 声称因为破产为了稳定运营引入订阅费是必要的举措。

A vulnerability classified as critical was found in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.4.7. Affected by this vulnerability is the function delete_user of the file crm/WeiXinApp/yunzhijia/yunzhijiaApi.php. The manipulation of the argument function leads to sql injection. This vulnerability is known as CVE-2025-8345. The attack can be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

Submit #617844 / VDB-318295

A vulnerability classified as critical has been found in openviglet shio up to 0.3.8. Affected is the function shStaticFileUpload of the file shio-app/src/main/java/com/viglet/shio/api/staticfile/ShStaticFileAPI.java. The manipulation of the argument filename leads to unrestricted upload. This vulnerability is traded as CVE-2025-8344. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

A vulnerability was found in openviglet shio up to 0.3.8. It has been rated as critical. This issue affects the function shStaticFilePreUpload of the file shio-app/src/main/java/com/viglet/shio/api/staticfile/ShStaticFileAPI.java. The manipulation of the argument fileName leads to path traversal. The identification of this vulnerability is CVE-2025-8343. The attack may be initiated remotely. Furthermore, there is an exploit available.

一年一度的“大考”火热进行中，攻防演练期间本公众号会每日更新当天鲜活情报和热点漏洞，欢迎大家对我们进行收藏和关注！

Submit #617680 / VDB-318294

Submit #617679 / VDB-318293

The joint Cybersecurity Advisory AA23-320A, collaboratively issued by agencies such as the FBI, CISA, RCMP, ASD’s ACSC, AFP, CCCS, and NCSC-UK, serves as a critical update on the Scattered Spider cybercriminal group. Originally published in November 2023 and revised multiple times, most recently on July 29, 2025 this advisory highlights the group’s persistent and adaptive […]

The post CISA and FBI Release Tactics, Techniques, and Procedures of the Scattered Spider Hacker Group appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Специалисты узнали почерк атакующих, но просто боятся это признать.

Menlo Park, United States, 30th July 2025, CyberNewsWire

FBI Dallas seized 20 BTC from Chaos ransomware affiliate “Hors,” tied to cyberattacks on Texas firms, on April 15, 2025. The FBI division in Dallas seized about 20 Bitcoins on April 15, 2025, from a wallet belonging to a Chaos ransomware affiliate named as “Hors.” The Hors affiliate is responsible for multiple cyberattacks on Texas […]

开放课题申请截止日期：2025年9月8日

个人信息保护认证