被黑分析｜Cork Protocol 遭攻击，损失超千万美元
此次攻击的根本原因在于未严格验证用户传入的数据是否符合预期。
Aggregator
Thousands of ASUS Routers Hijacked in Stealthy Backdoor Campaign
10 months ago
A threat actor has used ASUS routers’ legitimate features to create persistent backdoors that survive firmware updates and reboots
20250529 | 黄金3500点调整浪形
10 months ago
黄金3500点调整浪形
Nvidia CEO Huang Warns Export Bans Empower Chinese AI Firms
10 months ago
Huang Says Rules Shut Nvidia Out of $50B China Market, Gives Rivals Long-Term Edge
CEO Jensen Huang says new U.S. chip restrictions on China forced Nvidia to write down $4.5 billion in AI inventory and will hurt American leadership in global infrastructure as Chinese firms gain momentum. The rules fuel China’s rise and jeopardize U.S. infrastructure dominance, according to Huang.
CEO Jensen Huang says new U.S. chip restrictions on China forced Nvidia to write down $4.5 billion in AI inventory and will hurt American leadership in global infrastructure as Chinese firms gain momentum. The rules fuel China’s rise and jeopardize U.S. infrastructure dominance, according to Huang.
CISA Releases Five Industrial Control Systems Advisories
10 months ago
CISA released five Industrial Control Systems (ICS) advisories on May 29, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS.
- ICSA-25-148-01 Siemens SiPass
- ICSA-25-148-02 Siemens SiPass Integrated
- ICSA-25-148-03 Consilium Safety CS5000 Fire Panel
- ICSA-25-148-04 Instantel Micromate
- ICSMA-25-148-01 Santesoft Sante DICOM Viewer Pro
CISA encourages users and administrators to review newly released ICS advisories for technical details and mitigations.
CISA
UK military to establish new Cyber and Electromagnetic Command
10 months ago
Britain's strategic defense review calls for a new Cyber and Electromagnetic Command to “lead defensive cyber operations and coordinate offensive cyber capabilities" with the military's National Cyber Force.
Microsoft unveils “centralized” software update tool for Windows
10 months ago
Microsoft is looking to streamline the software updating process for IT admins and users by providing a Windows-native update orchestration platform, and to help organizations upgrade their computer fleet to Windows 11 with the help of Windows Backup for Organizations. The software update orchestration platform “Today, line-of-business apps, Windows components, Visual Studio, and other products are updated independently,” says Microsoft Product Manager Angie Chen. “Updates across the Windows ecosystem can feel like a fragmented experience … More →
The post Microsoft unveils “centralized” software update tool for Windows appeared first on Help Net Security.
Zeljka Zorz
Your IT Infrastructure is Hybrid. So Why Not Your Security Model?
10 months ago
A hybrid security model provides the ability to deploy a variety of rule sets for specific applications while providing a single, centralized way to manage it all.
The post Your IT Infrastructure is Hybrid. So Why Not Your Security Model? appeared first on Security Boulevard.
Charlie Gero
Medusa Locker
10 months ago
You must login to view this content
cohenido
Victoria’s Secret takes down website after security incident
10 months ago
Victoria's Secret, the fashion giant, has taken down its website and some store services because of an ongoing security incident [...]
Sergiu Gatlan
【活动】618风控专项，单个奖励最高4w+！
10 months ago
618风控专项4倍奖励，活动时间：5.30 ~6.18
China-linked APT41 used Google Calendar as C2 to control its TOUGHPROGRESS malware
10 months ago
Google says China-linked group APT41 controlled malware via Google Calendar to target governments through a hacked site. Google warns that China-linked APT41 used TOUGHPROGRESS malware with Google Calendar as C2, targeting various government entities via a compromised website. ” In late October 2024, GTIG discovered an exploited government website hosting malware being used to target multiple […]
Pierluigi Paganini
Cybersecurity Teams Generate Average of $36M in Business Growth
10 months ago
A new EY report found that cybersecurity teams are a major vehicle for business growth, and CISOs should push for a seat at the top table
360 MCP 生态安全风险治理实践与思考
10 months ago
360安全应急响应中心
Космос — наш! Китай бросает вызов всему миру миссией Tianwen-2
10 months ago
Китай запустил зонд, который соберет важнейшие улики со времён до Земли.
Afscheid Rob Bauer: "Vrede bewaren betekent voorbereiden op oorlog"
10 months ago
“Van jonge wachtofficier tot hoogste militair van het land, jij hebt alles meegemaakt. Het staartje van de Koude Oorlog, jarenlange bezuinigingen en de periode waarin Defensie weer kon investeren en groeien. In al die fasen ben jij koersvast gebleven.” Dat zei minister Ruben Brekelmans gisteren tegen admiraal Rob Bauer. Die nam na 43 jaar afscheid van Defensie. Dat gebeurde tijdens een receptie op het Marine Etablissement Amsterdam.
CVE-2025-5332 | 1000 Projects Online Notice Board 1.0 /index.php email sql injection
10 months ago
A vulnerability was found in 1000 Projects Online Notice Board 1.0 and classified as critical. This issue affects some unknown processing of the file /index.php. The manipulation of the argument email leads to sql injection.
The identification of this vulnerability is CVE-2025-5332. The attack may be initiated remotely. Furthermore, there is an exploit available.
vuldb.com
UTG-Q-015 Hackers Launch Massive Brute-Force Attacks on Government Web Servers
10 months ago
The hacker group UTG-Q-015, first identified in December 2024 for mounting attacks on major websites like CSDN, has escalated its malicious activities, targeting government and enterprise web servers with unprecedented aggression. Initially disclosed for their tactics of website manipulation, the group has since pivoted to exploiting 0day and Nday vulnerabilities, launching widespread brute-force scanning and […]
The post UTG-Q-015 Hackers Launch Massive Brute-Force Attacks on Government Web Servers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
Aman Mishra
An Enterprise Playbook to Defending Against Volt Typhoon
10 months ago
An identity threat detection approach built on access intelligence is key to identifying and disrupting campaigns like Volt Typhoon.
The post An Enterprise Playbook to Defending Against Volt Typhoon appeared first on Security Boulevard.
Mike Towers
【安全圈】WordPress TI WooCommerce Wishlist 插件漏洞使 100,000+ 网站遭受网络攻击
10 months ago
关键词安全漏洞流行的 TI WooCommerce Wishlist 插件中的一个严重安全漏洞已使超过 100