Aggregator

文章描述了错误代码521的含义及其常见原因。该错误通常由Cloudflare引发，表示源服务器无法连接或响应请求。常见原因包括网络问题、服务器配置错误或防火墙设置不当。解决方法包括检查服务器状态、验证网络连接以及调整防火墙规则以允许Cloudflare IP地址访问源服务器。

HackerNews 编译，转载请注明出处： 一家黑客组织声称入侵了以色列航天通信公司Spacecom，该公司运营着AMOS卫星（以色列军民两用静止轨道通信卫星）。攻击者称，已获取了该公司地面控制站的访问权限。 亲巴勒斯坦黑客组织Handala在其暗网博客上将Spacecom列为攻击目标，该组织常通过此博客展示其最新攻击对象。 攻击者声称，他们从Spacecom系统中获取了几百个GB 的数据，其中包括地面控制站的相关数据（地面控制站是卫星控制基础设施的核心组成部分）。 Spacecom运营着多颗AMOS卫星，通过这些卫星在中东、欧盟及其他地区提供民用和军用通信服务，该公司年收入约为 1 亿美元。 Handala组织称，此次获取的数据约379GB 数据，其中包含多个国家地面站的信息。该组织还额外发布了一篇帖子，据称曝光了太空通信公司员工的个人详细信息。 根据Cybernews研究团队消息，暗网上的截图包含Spacecom与客户签订的保密协议照片。这些协议主要涉及使用AMOS—17卫星进行通信服务的客户。研究人员表示，协议中包含服务套餐规格等内容，并非高度敏感信息。 研究人员解释道：“Handala组织附带了一个约 960MB 的压缩文件夹，其中包含 RINEX 观测与导航文件，这些文件看似仅是卫星运行日志，可用于实时监控卫星运行状态，但要发挥实际作用，还需配合其他敏感信息。” 该团队认为，这些信息主要可用于对该公司员工实施社会工程学攻击。 研究人员表示：“目前尚无充分证据表明他们确实掌握了可控制卫星的高度机密数据或敏感系统。尽管如此，太空通信公司应立即对可能遭攻击的系统进行漏洞修补。” 与此同时，Handala组织是一个支持德黑兰的黑客激进组织，其攻击目标主要为以色列及西方机构。与勒索软件团伙类似，该组织运营着一个暗网博客，用于发布窃取的数据。 今年早些时候，该组织曾攻击伊朗国际电视台。     消息来源：cybernews； 本文由 HackerNews.cc 翻译整理，封面来源于网络； 转载请注明“转自 HackerNews.cc”并附上原文

GitHub has unveiled the public preview of Copilot CLI—a tool that brings the power of its AI agent

The post GitHub Unveils Copilot CLI: A New AI Agent That Brings Coding Assistance to Your Terminal appeared first on Penetration Testing Tools.

A new tool has emerged on the cybercriminal marketplace—one that has swiftly become a weapon of choice for

The post HeartCrypt: The MaaS Platform That Packs Malware Inside Legitimate Apps, Then Kills Your Antivirus appeared first on Penetration Testing Tools.

The U.S. Department of Justice has obtained court authorization to conduct a remote search of Telegram’s servers as

The post DOJ Obtains Court Order for Remote Search of Telegram Servers appeared first on Penetration Testing Tools.

Specialists have disclosed a new critical vulnerability in the wireless network configuration procedure of Unitree robots. The flaw,

The post UniPwn: Critical Zero-Day Flaw Found in Unitree Robots Allows Root Access via Bluetooth appeared first on Penetration Testing Tools.

Researchers at Fortinet FortiGuard Labs have uncovered a new cyber-attack campaign masquerading as communications from the National Police

The post New Phishing Campaign Impersonates Ukrainian Police to Deliver Amatera Stealer and PureMiner appeared first on Penetration Testing Tools.

Experts at Silent Push have released an in-depth study on subdomain rental services, often referred to in documentation

The post The Shadow Internet: A New Report Exposes How Cybercriminals Exploit Subdomain Rental Services appeared first on Penetration Testing Tools.

The world’s leading cybersecurity agencies have issued urgent warnings of a critical threat to global network infrastructure: vulnerabilities

The post CISA Issues Emergency Directive: Zero-Day Attacks on Cisco Firewalls Pose Global Threat appeared first on Penetration Testing Tools.

A vulnerability identified as problematic has been detected in Go-viper mapstructure. This vulnerability affects unknown code. The manipulation leads to sensitive information in log files. This vulnerability is listed as CVE-2025-11065. The attack must be carried out from within the local network. There is no available exploit.

A vulnerability was found in PyTorch 2.7.0. It has been rated as problematic. Affected is the function torch.nn.Conv2d. This manipulation causes denial of service. This vulnerability is registered as CVE-2025-55558. The attack requires access to the local network. No exploit is available.

Sandfly安全工具现已上线微软Azure市场，支持轻松部署并提供灵活的许可证购买方式。它可快速部署于各类Linux环境的云及本地基础设施中，为Azure用户提供实时保护。

Эксплойт запускается при получении сообщения и работает на iOS, macOS и iPadOS.

值此中秋佳节来临之际，慢雾预祝大家：花好月圆，阖家安康，安全常伴！

AdSense新账号因无效流量被限制广告投放，作者分析原因并采取调整措施。

目前已收集100+个优质岗位和50+优秀人才！

当前环境异常，请完成验证后继续访问。

文章讨论了SFTP的安全风险及防护措施。攻击者通过扫描TCP 22和2222端口并利用被盗凭证或暴力破解入侵。建议采用公钥认证替代密码，并强化SSH配置以限制权限。同时需定期轮换密钥、监控日志并结合其他安全工具以提升整体防护能力。