Aggregator

这项研究首次记录了，预装谷歌应用如何在未经用户同意且不提供退出选项的情况下进行静默追踪。

Submit #513403 / VDB-286191

Submit #513400 / VDB-286191

一项对近 80,000 名丹麦男性进行的研究表明，精液质量与寿命相关。该研究对男性进行了长达 50 年的跟踪，发现那些总活动精子数超过 1.2 亿的男性，比总活动精子数在 0 到 500 万之间的男性预期寿命长两到三年。研究人员分析了 78,284 名男性的数据，这些男性在 1965 年至 2015 年间因报告的夫妻不孕问题在哥本哈根的公共精液分析实验室接受了精液质量检测。这意味着这些男性的精液质量从非常好到无精子不等。研究人员利用丹麦的国家登记数据，查看有多少人死于任何原因。在这段时间里，共有 8,600 人死亡，占该组男性的 11%。计算显示，总活动精子数超过 1.2 亿的男性比总活动精子数在 0 到 500 万之间的男性寿命长 2.7 年。精液质量越低，预期寿命越短。研究人员认为，较差的精液质量可能是其他影响生育能力和整体健康的潜在因素的指标。

Off-Brand Android Devices Come Infected With a Trojan
A botnet infected more than 1 million off-brand Android devices manufactured in China, which reached consumers with a backdoor already installed. Scammers used the devices for programmatic ad fraud, click fraud and converting the devices into a residential proxy.

把时间花在重要的事情上，减少浪费时间在重复动作上

Over 1,000 websites powered by WordPress have been infected with a third-party JavaScript code that injects four separate backdoors. "Creating four backdoors facilitates the attackers having multiple points of re-entry should one be detected and removed," c/side researcher Himanshu Anand said in a Wednesday analysis. The malicious JavaScript code has been found to be served via cdn.csyndication[

2月28日，习近平总书记在中共中央政治局第十九次集体学习时着重强调，要坚定不移贯彻总体国家安全观，在国家更加安 […]

一旦黑客突破了组织的防御，在网络内部移动和访问信息就相对容易，可能会持续数天甚至数月而未被发现。这对于存储有宝 […]

新闻速览 •合规压力过大，金融机构敦促CISA修订网络事件报告规则 •暗网Nemesis管理员遭美国财政部制裁 […]

A vulnerability was found in ninjateam Notibar Plugin up to 2.1.5 on WordPress. It has been classified as problematic. Affected is an unknown function of the component Setting Handler. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2025-1672. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability was found in LinZhaoguan pb-cms 1.0.0 and classified as critical. This issue affects some unknown processing of the file /admin#themes of the component Add New Topic Handler. The manipulation of the argument Topic Key leads to deserialization. The identification of this vulnerability is CVE-2025-2043. The attack may be initiated remotely. Furthermore, there is an exploit available.