Aggregator

FBI警告俄罗斯关联组织Static Tundra利用Cisco 7年前漏洞CVE-2018-0171进行网络间谍活动，主要针对美国及全球关键基础设施和特定行业，窃取配置数据并建立持久访问。

FBI warns FSB-linked group Static Tundra is exploiting a 7-year-old Cisco IOS/IOS XE flaw to gain persistent access for cyber espionage. The FBI warns that Russia-linked threat actor Static Tundra exploits Simple Network Management Protocol (SNMP) and end-of-life networking devices running an unpatched vulnerability (CVE-2018-0171) in Cisco Smart Install (SMI) to target organizations in the […]

深度求索发布并开源DeepSeek-V3.1模型，采用混合架构整合思考与非思考模式，并提升效率。支持Anthropic API格式接入Claude Code框架。API价格自9月6日起调整为输入缓存0.5元/百万、非缓存4元/百万。

/r/netsec 是一个由社区管理的技术信息安全聚合平台，旨在为安全从业者、学生、研究人员和黑客提供有价值的信息。

Вредонос крадёт данные из Chrome и Microsoft Edge.

Grok AI 和 ChatGPT 均出现用户分享对话被搜索引擎抓取的问题。用户生成分享链接时未获提醒且无反爬措施, 致超30万条包含敏感信息的会话被公开。OpenAI 已下线并道歉, 但 xAI 未采取行动。

Den Odell探讨了未来前端开发的趋势、技术发展及性能优化。

A vulnerability, which was classified as critical, has been found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. Affected by this issue is the function RP_doSpecifySiteSurvey of the file /goform/RP_doSpecifySiteSurvey. The manipulation of the argument ssidhex leads to stack-based buffer overflow. This vulnerability is listed as CVE-2025-9253. The attack may be initiated remotely. In addition, an exploit is available. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability categorized as problematic has been discovered in Xuxueli xxl-job up to 3.1.1. Affected by this vulnerability is the function getJobsByGroup of the file /src/main/java/com/xxl/job/admin/controller/JobLogController.java. Such manipulation of the argument jobGroup leads to improper control of resource identifiers. This vulnerability is traded as CVE-2025-9263. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as problematic, has been found in GiveWP Plugin up to 4.5.0 on WordPress. This affects the function give_update_payment_status. The manipulation leads to missing authorization. This vulnerability is uniquely identified as CVE-2025-7221. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability, which was classified as problematic, was found in Inspiro Plugin up to 2.1.2 on WordPress. This impacts the function inspiro_install_plugin of the component Installation Handler. The manipulation results in cross-site request forgery. This vulnerability was named CVE-2025-8592. The attack may be performed from a remote location. There is no available exploit.

A vulnerability has been found in FunnelKit SlingBlocks Plugin up to 1.6.0 on WordPress and classified as problematic. Affected is an unknown function of the component Countdown Block Handler. This manipulation causes cross site scripting. The identification of this vulnerability is CVE-2025-8607. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability described as critical has been identified in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. This impacts the function setPWDbyBBS of the file /goform/setPWDbyBBS. Such manipulation of the argument hint leads to stack-based buffer overflow. This vulnerability is referenced as CVE-2025-9250. It is possible to launch the attack remotely. Furthermore, an exploit is available. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability classified as critical has been found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. Affected is the function sta_wps_pin of the file /goform/sta_wps_pin. Performing manipulation of the argument Ssid results in stack-based buffer overflow. This vulnerability is identified as CVE-2025-9251. The attack can be initiated remotely. Additionally, an exploit exists. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability classified as critical was found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. Affected by this vulnerability is the function DisablePasswordAlertRedirect of the file /goform/DisablePasswordAlertRedirect. Executing manipulation of the argument hint can lead to stack-based buffer overflow. This vulnerability is tracked as CVE-2025-9252. The attack can be launched remotely. Moreover, an exploit is present. The vendor was contacted early about this disclosure but did not respond in any way.

Den Odell是一位前端架构师和书籍作者，专注于JavaScript和性能优化。他在个人博客denodell.com上探讨前端开发的未来趋势。

Orange Belgium遭遇网络攻击，约85万客户数据被盗。受影响数据包括姓名、电话号码等个人信息，但未涉及密码和财务信息。公司已通知客户并提醒警惕诈骗行为。此次事件与此前Orange集团披露的另一起网络攻击无关。

本文详细探讨了S3对象存储的安全问题及应对策略，包括存储桶爆破、接管、任意文件上传、ACL配置错误、策略漏洞等攻击原理与防御措施，并介绍了利用云函数限制文件上传类型的解决方案。

文章探讨了AI初创企业在构建SaaS产品时的策略与挑战，强调结合机器学习与人类智慧以实现目标对齐，并分享了在实际应用中的经验与教训。

Doppel announced Doppel Simulation, a new product and expansion to the Doppel Vision Platform that enables organizations to redefine security awareness training and social engineering penetration testing by mirroring today’s multi-channel and dynamic attacker behaviors. Informed by real-world threats and built with autonomous AI phishing agents, Simulation generates customized, hyper-realistic scenarios tailored to each organization and employee role and behavior, making it possible for businesses to strengthen defenses against modern social engineering attacks. Simulation enables … More →

The post Doppel Simulation combats social engineering attacks appeared first on Help Net Security.