Aggregator

Phishing campaign targets U.S. Department of Education’s G5 portal

Help Net Security
11 months 1 week ago

A new phishing campaign is targeting users of the U.S. Department of Education’s G5 portal, a site used by educational institutions and vendors to manage grants and federal education funding. Threat researchers at BforeAI uncovered a cluster of lookalike domains designed to steal user credentials by mimicking the official G5.gov login page. Cloned version of the G5 portal (Source: BforeAI) The attack uses deceptive domains like g5parameters.com and g4parameters.com, among others, that copy the visual … More →

The post Phishing campaign targets U.S. Department of Education’s G5 portal appeared first on Help Net Security.

Anamarija Pogorelec

Weekoverzicht Defensieoperaties

Defensie.nl - Nieuwsberichten
11 months 1 week ago
4 F-35-gevechtsvliegtuigen vlogen over het festivalterrein bij de opening van Zwarte Cross in Lichtenvoorde. Dat gebeurde op verzoek van de organisatie. Met de ‘fly by’ wil Defensie onder meer haar zichtbaarheid naar het overwegend jonge publiek vergroten. Een overzicht van Defensieoperaties in de week van 16 tot en met 22 juli 2025.

Google Launches OSS Rebuild to Expose Malicious Code in Widely Used Open-Source Packages

The Hackers News
11 months 1 week ago
Google has announced the launch of a new initiative called OSS Rebuild to bolster the security of the open-source package ecosystems and prevent software supply chain attacks. "As supply chain attacks continue to target widely-used dependencies, OSS Rebuild gives security teams powerful data to avoid compromise without burden on upstream maintainers," Matthew Suozzo, Google Open Source Security
The Hacker News

研究发现 AI 摘要会显著降低搜索结果页的点击率

Solidot
11 months 1 week ago
Google 已经为其搜索结果页面引入了 AI 摘要功能，它宣称该功能不会抢走网站的流量。然而皮尤研究中心的一项研究给出了不同的答案：AI 摘要会显著降低搜索结果页的点击率。研究人员分析 2025 年 3 月收集的 Ipsos KnowledgePanel 900 名用户的数据，显示当页面包含 AI 摘要时，用户点击搜索结果的可能性要小得多。如果搜索结果页面不包含 AI 摘要，用户的点击率为 15%；如果包含 AI 答案，点击率降为 8%。对于 Google 在 AI 摘要中包含的链接，研究发现其点击率为 1%——链接的来源主要是维基百科、YouTube 和 Reddit。更令人担忧的是用户在看到 AI 摘要之后更可能关闭会话，也就是不再继续搜索，不去验证 AI 摘要是否正确——而幻觉是生成式 AI 的固有问题，幻觉指的是虚构的错误信息。研究表明，Google 对 AI 的使用正在改变收集信息与搜索结果互动的方式。

INC

Dark Feed IO
11 months 1 week ago

You must login to view this content

cohenido

CVE-2025-41687 | Weidmueller IE-SR-2TX-WL u-link Management API stack-based overflow (VDE-2025-052 / EUVD-2025-22434)

VulDB Recent Entries
11 months 1 week ago
A vulnerability, which was classified as critical, was found in Weidmueller IE-SR-2TX-WL, IE-SR-2TX-WL-4G-EU and IE-SR-2TX-WL-4G-US-V. Affected is an unknown function of the component u-link Management API. The manipulation leads to stack-based buffer overflow. This vulnerability is traded as CVE-2025-41687. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-8070 | ASUSTOR ABP/AES Windows Service Configuration unquoted search path (EUVD-2025-22418)

VulDB Recent Entries
11 months 1 week ago
A vulnerability, which was classified as problematic, has been found in ASUSTOR ABP and AES. This issue affects some unknown processing of the component Windows Service Configuration. The manipulation leads to unquoted search path. The identification of this vulnerability is CVE-2025-8070. The attack needs to be approached locally. There is no exploit available.
vuldb.com

CVE-2025-41684 | Weidmueller IE-SR-2TX-WL Main Web Interface tls_iotgen_setting os command injection (VDE-2025-052 / EUVD-2025-22435)

VulDB Recent Entries
11 months 1 week ago
A vulnerability classified as critical was found in Weidmueller IE-SR-2TX-WL, IE-SR-2TX-WL-4G-EU and IE-SR-2TX-WL-4G-US-V. This vulnerability affects unknown code of the file tls_iotgen_setting of the component Main Web Interface. The manipulation leads to os command injection. This vulnerability was named CVE-2025-41684. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

Managed ad