Aggregator

Kosovo national Liridon Masurica has pleaded guilty to running BlackDB.cc, a cybercrime marketplace that has been active since 2018. [...]

Как новый подход к фишингу делает из обычных писем опасную приманку.

Microsoft has released its September 2025 Patch Tuesday updates, addressing a total of 81 security vulnerabilities across its product suite. The security patches cover a wide range of software, including Windows, Microsoft Office, Azure, and SQL Server. Among the fixes are 22 Remote Code Execution (RCE) vulnerabilities, making this a significant update for system administrators. […]

The post Microsoft September 2025 Patch Tuesday – 81 Vulnerabilities Fixed Including 22 RCE appeared first on Cyber Security News.

Архитектура позволяет быстро наращивать мощность и подстраивать комплекс под задачи заказчиков.

Media streaming company Plex has suffered a data breach and is urging users to reset their account password and enable two-factor authentication. “An unauthorized third party accessed a limited subset of customer data from one of our databases. While we quickly contained the incident, information that was accessed included emails, usernames, securely hashed passwords and authentication data,” the company said in an announcement published on the company’s forums on Monday and sent out via email … More →

The post Plex tells users to change passwords due to data breach, pushes server owners to upgrade appeared first on Help Net Security.

Схема маскировки работала безупречно, пока исследователи не нашли ключевую зацепку.

Why planning and rehearsing your recovery from an incident is as vital as building your defences

Submit #639745 / VDB-323236

Submit #639709 / VDB-128117

King, a leading voice in the Senate on cybersecurity issues, honed in on the thousands of staffers and experts laid off by CISA, saying the agency has lost 30 percent of its staff and most of its seasoned leaders.

The U.S. Department of Justice has charged Ukrainian national Volodymyr Viktorovich Tymoshchuk for his role as the administrator of the LockerGoga, MegaCortex, and Nefilim ransomware operations. [...]

Submit #639041 / VDB-323235

Submit #637921 / VDB-323234

Submit #636882 / VDB-323233

Google 周二同意遵守韩国的要求，对敏感卫星图像进行模糊处理，为 Google 在韩国提供地图服务铺平道路。韩国是中俄之外少数 Google Maps 不能正常工作的地区之一，原因是韩国法律要求企业将核心地理空间数据存储在当地，而 Google 长期以来拒绝这么做。Naver 和 Kakao 等韩国本土科技公司垄断了当地地图服务市场，让不熟悉这些平台的外国游客导航更加困难。Google 的最新举措标志着 Google 与韩国持续近二十年争执的结束。

Why CISOs Must Rethink Access, Behavioral Analytics and AI Governance at Scale
Zero trust is evolving beyond static controls and network segmentation. CISOs must prepare for dynamic, behavior-driven security models that incorporate real-time intelligence, enforce identity and data safeguards, and manage AI as both a threat vector and a security tool.

今日暂未更新资讯~
更多最新文章，请访问SecWiki

Adobe is warning of a critical vulnerability (CVE-2025-54236) in its Commerce and Magento Open Source platforms that researchers call SessionReaper and describe as one of " the most severe" flaws in the history of the product. [...]

Cybercriminal operations use the same strategy and planning as legitimate organizations as they arm adversarial phishing kits with advanced features.

A new, sophisticated phishing kit, Salty2FA, is using advanced tactics to bypass MFA and mimic trusted brands. Read…