Aggregator

近日，国家信息安全漏洞库（CNNVD）收到关于Apache Tomcat安全漏洞（CNNVD-202503-1068、CVE-2025-24813）情况的报送。

近日，国家信息安全漏洞库（CNNVD）收到关于Apache Tomcat安全漏洞（CNNVD-202503-1068、CVE-2025-24813）情况的报送。

Alloy launched Fraud Attack Radar, a machine learning-powered solution that provides financial institutions (FIs) and fintechs with actionable intelligence on fraud threats targeting new account creation. The new solution helps organizations address rising fraud risks by alerting in real-time when a suspected fraud attack is happening, with actionable insights in the Alloy platform to contain, triage and investigate threats, giving FIs the ability to proactively fight fraud without impeding growth. According to Alloy’s 2025 State … More →

The post Alloy Fraud Attack Radar provides intelligence on fraud threats appeared first on Help Net Security.

Defensie wil de zorg voor veteranen en de loopbaankansen van vrouwelijke militairen verbeteren. 2 nieuwe onderzoeken van de Nederlandse Defensie Academie (NLDA) geven hier belangrijke inzichten in. Ze laten zien welke uitdagingen vrouwelijke militairen en veteranen ervaren en welke verbeteringen mogelijk zijn.

朝鲜 Lazarus 黑客通过 npm 包发起供应链攻击，窃取凭证、部署后门并提取加密货币信息。

Meta ответит за тренировки ИИ на чужих книгах.

Rambus announced its next-generation CryptoManager Security IP solutions including Root of Trust, Hub and Core families. The CryptoManager Security IP offerings deliver progressively higher levels of functional integration and security, enabling customers to choose the level of security features and capabilities best suited to their unique requirements. The CryptoManager Root of Trust delivers a fully-turnkey solution and offers a Quantum Safe boot flow. The CryptoManager Hub provides the ideal combination of proven cryptographic building blocks … More →

The post Rambus introduces CryptoManager Security IP solutions appeared first on Help Net Security.

作者：DARKNAVY 原文链接：https://mp.weixin.qq.com/s/LaM5iz_EKbAK_lkaAcBshw 在攻防对抗日益激烈的2024年，安全软件一直被视为企业安全防线的重要基石。然而，这些安全软件本身也可能存在漏洞，甚至被攻击者利用作为入侵的跳板来对用户造成危害。多年来，因为安全软件而导致的事故不禁让人产生一个疑问——安全软件真的可信吗？ 安全软件被滥用为攻击工...

A vulnerability was found in Linux Kernel up to 5.4.214/5.10.147/5.15.67/5.19.8. It has been declared as critical. Affected by this vulnerability is the function snd_pcm_oss_sync of the component ALSA. The manipulation leads to null pointer dereference. This vulnerability is known as CVE-2022-49733. The attack needs to be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in Google Chrome. This affects an unknown part of the component V8. The manipulation leads to type confusion. This vulnerability is uniquely identified as CVE-2025-2135. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic was found in OpenVPN up to 2.4.12/2.5.6. Affected by this vulnerability is an unknown functionality of the component External Authentication Plug-in Handler. The manipulation leads to authentication bypass by primary weakness. This vulnerability is known as CVE-2022-0547. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Google Chrome. It has been rated as critical. Affected by this issue is some unknown functionality of the component V8. The manipulation leads to type confusion. This vulnerability is handled as CVE-2025-1920. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

本周，互联网网络安全态势整体评价为良。

2025年3月11日，深瞳漏洞实验室监测到一则Apache-Tomcat组件存在代码执行漏洞的信息，漏洞编号：CVE-2025-24813，漏洞威胁等级：高危。

本周，互联网网络安全态势整体评价为良。

2025年3月11日，深瞳漏洞实验室监测到一则Apache-Tomcat组件存在代码执行漏洞的信息，漏洞编号：CVE-2025-24813，漏洞威胁等级：高危。

A vulnerability, which was classified as problematic, was found in Zoom Workplace App and Meeting SDK up to 6.2.x on iOS. This affects an unknown part. The manipulation leads to denial of service. This vulnerability is uniquely identified as CVE-2025-0150. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.