Aggregator

美国众议院中国特别委员会警告称，中国正在进行针对美中贸易政策和外交相关组织及个人的网络间谍活动。攻击者冒充共和党议员发送钓鱼邮件，窃取敏感数据。该活动被指为中共支持的黑客行为，旨在影响美国政策制定。

实力！

Plex警告用户其数据库遭入侵，可能导致部分数据泄露。受影响数据包括电子邮件地址、用户名和加密密码等。公司建议用户重置密码以确保账户安全，并解释了加密技术如何保护用户信息。

Как один закон может уничтожить WhatsApp и Signal.

Lazarus Group是朝鲜支持的知名网络攻击组织，在2025年通过伪装IT员工、虚假招聘和劫持开源软件等手段加强了对科技行业的攻击。其恶意软件包括InvisibleFerret、OtterCookie和PyLangGhost RAT，用于窃取数据和进行金融诈骗。ANY.RUN的互动沙盒和威胁情报工具可帮助检测并应对这些威胁。

中国联通、中国移动和中国电信已为eSIM卡业务做好准备，仅支持国行版iPhone Air A3518。国行版可开通国内及国外eSIM服务，外行版无法在中国使用蜂窝网络。

项目地址：https://github.com/linlinjava/litemall

Poolse en Nederlandse gevechtsvliegtuigen hebben afgelopen nacht boven Polen Russische drones neergehaald. De onbemande toestellen waren het NAVO-luchtruim binnengedrongen.

A vulnerability was found in Shibboleth Service Provider up to 3.5.0. It has been declared as critical. Affected is the function SQLString of the file odbc-store.cpp. Executing manipulation can lead to sql injection. This vulnerability is handled as CVE-2025-9943. The attack can be executed remotely. There is not any exploit available.

A vulnerability was found in Welotec SmartEMS Web Application up to 3.3.5. It has been classified as critical. This impacts an unknown function of the component Request Header Handler. Performing manipulation of the argument Upload-Key results in path traversal. This vulnerability is known as CVE-2025-41714. Remote exploitation of the attack is possible. No exploit is available. Upgrading the affected component is recommended.

文章探讨了MSP和MSSP在网络安全与合规管理中的挑战，指出手动流程导致效率低下。通过自动化技术如AI驱动的平台，可简化重复任务、提高一致性并释放资源，从而提升服务交付能力与客户满意度。

Introduction Managed service providers (MSPs) and managed security service providers (MSSPs) are under increasing pressure to deliver strong cybersecurity outcomes in a landscape marked by rising threats and evolving compliance requirements. At the same time, clients want better protection without managing cybersecurity themselves. Service providers must balance these growing demands with the

The Lazarus Group, North Korea’s state-sponsored hacking collective, has held the title of the most notorious advanced persistent threat (APT) for almost two decades now. In 2025, it escalated its cyber operations, targeting tech industries with fake IT workers, fraudulent job interviews, and hijacked open-source software.   It’s time to take a closer look at its […]

The post Lazarus Group Attacks in 2025: Here’s Everything SOC Teams Need to Know  appeared first on ANY.RUN's Cybersecurity Blog.

Microsoft has fixed over 80 vulnerabilities including two publicly disclosed zero-days in its latest Patch Tuesday release

Три миллиарда строк и 160 млн записей: это без преувеличения крупнейшая утечка в истории государства.

当前环境出现异常状态,需完成验证后方可继续访问操作。

In a twist of fate that underscores both the power and inherent transparency of endpoint detection and response (EDR) solutions. By investigating alerts generated through this deployment, the Huntress Security Operations Center (SOC) gained unprecedented insight into the adversary’s day-to-day workflows, tool usage, and evolving tradecraft. Huntress’s commitment to transparency and community education led to […]

The post Threat Actor’s Self-Deployment of EDR Exposes Their Tools and Workflows appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

第十届上海市大学生网络安全大赛 暨“磐石行动”2025第三届全国高校网络安全攻防活动