Aggregator

当前环境出现异常情况，需完成验证后方可继续访问相关内容或功能。

01.NET内网安全攻防报刊小报童电子报刊【.NET内网安全攻防】也正式上线了，引入小报童也是为了弥补知识星球

比亚迪仰望 U9 工程测试车创造 472.41km/h 全球电车极速新纪录； OPPO 回应苹果起诉员工窃密：并未侵犯苹果公司商业秘密，相信公正的司法审理能够澄清事实； 何小鹏回应和马斯克「网上打架」：主要是信息差造成的，现在是隔空尊重

フィッシング対策協議会の証明書普及促進ワーキンググループは、「SSL/TLSサーバー証明書における 有効期間短縮化について」を公開しました。2025年4月にパブリックな証明書の要件を定める業界団体CA/Browser Forumで可決されたサーバー証明書の有効期限の段階的な短縮により、最終的に2029年3月15日以降に発行されるサーバー証明書の最大有効期間は47日まで短縮されます。本ドキュメントでは、この有効期間を短縮する目的について解説しています。

当前环境出现异常问题，需完成验证后才能继续访问服务。

标准体系覆盖全流程数据处理活动。

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 5.17.3. This impacts the function poly1305_update_arch of the file arch/x86/crypto/poly1305_glue.c. This manipulation of the argument link_len causes buffer overflow. This vulnerability is handled as CVE-2022-49058. The attack can only be done within the local network. There is not any exploit available. It is advisable to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in c3p0 up to 0.9.5.3. Affected is an unknown function of the component XML Configuration Handler. The manipulation results in improper resource management. This vulnerability was named CVE-2019-5427. The attack may be performed from a remote location. There is no available exploit. You should upgrade the affected component.

A vulnerability described as problematic has been identified in Git up to 2.26.0. Affected is an unknown function of the component Credential Helper. Executing manipulation as part of HTTP Request can lead to improper input validation (Credentials). This vulnerability is registered as CVE-2020-5260. It is possible to launch the attack remotely. Furthermore, an exploit is available. Upgrading the affected component is recommended.

A vulnerability was found in Microsoft Visual Studio Code Python Extension and classified as problematic. Affected by this issue is some unknown functionality. Such manipulation leads to trust boundary violation. This vulnerability is documented as CVE-2025-49714. The attack can be executed remotely. There is not any exploit available. Applying a patch is advised to resolve this issue.

A vulnerability labeled as problematic has been found in Microsoft Visual Studio. Affected is an unknown function. Executing manipulation can lead to link following. This vulnerability is handled as CVE-2025-49739. The attack can be executed remotely. There is not any exploit available. It is advisable to implement a patch to correct this issue.

A recent UNC6395 Salesloft Drift breach reveals Salesforce SaaS risks. Learn how to simplify breach detection, prevention, and visibility.

The post UNC6395 and the Salesloft Drift Attack: Why Salesforce OAuth Integrations are a Growing Risk appeared first on AppOmni.

The post UNC6395 and the Salesloft Drift Attack: Why Salesforce OAuth Integrations are a Growing Risk appeared first on Security Boulevard.

The discovery of PromptLock shows how malicious use of AI models could supercharge ransomware and other threats

This daily article is intended to make it easier for those who want to stay updated with my regular Dark Web Informer and X/Twitter posts.

A vulnerability classified as problematic has been found in Nautobot up to 1.6.15/2.1.8. This issue affects some unknown processing of the component URL Endpoint. The manipulation leads to information disclosure. This vulnerability is documented as CVE-2024-29199. The attack can be initiated remotely. There is not any exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in Check Point ZoneAlarm Extreme Security NextGen, Identity Agent for Windows and Identity Agent for Windows Terminal Server on Windows. Affected by this vulnerability is an unknown functionality. Such manipulation leads to incorrect permission assignment. This vulnerability is documented as CVE-2024-24910. The attack needs to be performed locally. There is not any exploit available. You should upgrade the affected component.

A vulnerability was found in Navidrome up to 0.51.x. It has been declared as critical. This affects an unknown part of the component HTTP Traffic Handler. Executing manipulation can lead to information disclosure. This vulnerability is registered as CVE-2024-32963. It is possible to launch the attack remotely. No exploit is available. It is recommended to upgrade the affected component.