Aggregator

Программа против угроз стала самой большой угрозой.

Moscow-based cybersecurity firm Kaspersky said the campaign has already affected over 100 victims across several dozen Russian organizations, but did not disclose the specific targets.

开源邮件客户端 Thunderbird 释出了 v140 ESR 版(长期支持版本)，将提供一年的安全更新，相比非 ESR 版本，它主要针对企业级和教育市场，这些领域不需要频繁更新以免引入破坏兼容性的功能。v140 ESR 的主要变化也与此相关：实现企业策略允许细粒度应用内通知控制；新邮件提醒包含在消息处理按钮内；邮件通知添加 Mark as Read（标记已读）和 Delete（删除）操作；邮件通知添加“Mark as Spam（标记为垃圾邮件）”和“加星”操作；等等。

A vulnerability was found in Quiter Gateway up to 4.6.x. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /QISClient/api/v1/sucesospaginas. The manipulation leads to sql injection. This vulnerability is known as CVE-2025-40715. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic has been found in Quiter Gateway up to 4.6.x. This affects an unknown part. The manipulation leads to information exposure through error message. This vulnerability is uniquely identified as CVE-2025-40718. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Quiter Gateway up to 4.6.x. This vulnerability affects unknown code of the file /FacturaE/VerFacturaPDF. The manipulation of the argument id_concesion leads to sql injection. This vulnerability was named CVE-2025-40711. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Quiter Gateway up to 4.6.x. This issue affects some unknown processing of the file /FacturaE/listado_facturas_ficha.jsp. The manipulation of the argument id_factura leads to sql injection. The identification of this vulnerability is CVE-2025-40714. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Quiter Gateway up to 4.6.x. Affected is an unknown function of the file /QMSCliente/Sucesos.action. The manipulation leads to sql injection. This vulnerability is traded as CVE-2025-40716. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Quiter Gateway up to 4.6.x and classified as critical. Affected by this issue is some unknown functionality of the file /QuiterGatewayWeb/api/v1/sucesospagina. The manipulation leads to sql injection. This vulnerability is handled as CVE-2025-40717. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in PHPGurukul Car Washing Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/editcar-washpoint.php. The manipulation of the argument wpid leads to sql injection. This vulnerability is handled as CVE-2025-7177. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability was found in Quiter Gateway up to 4.6.x. It has been classified as problematic. This affects an unknown part of the file /FacturaE/VerFacturaPDF. The manipulation of the argument id_concesion leads to cross site scripting. This vulnerability is uniquely identified as CVE-2025-40719. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Quiter Gateway up to 4.6.x. It has been declared as problematic. This vulnerability affects unknown code of the file /FacturaE/VerFacturaPDF. The manipulation of the argument campo leads to cross site scripting. This vulnerability was named CVE-2025-40720. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Quiter Gateway up to 4.6.x. It has been rated as problematic. This issue affects some unknown processing of the file /FacturaE/listado_facturas_ficha.jsp. The manipulation of the argument id_factura leads to cross site scripting. The identification of this vulnerability is CVE-2025-40721. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

Google的Gemini AI现可访问Android用户的第三方应用如WhatsApp、Messages和Phone，引发隐私与安全担忧。即使用户关闭相关功能，Gemini仍可访问。建议检查权限并关闭不必要的AI集成以保护隐私。

Внутри — пластик, пестициды, парабены. Снаружи — улыбка. Вот оно — современное детство.

一个奇怪的废弃资产？

一天，我正看着刚刚收集的某SRC资产列表，在图标列表里发现了一个从没见过的奇怪图标。

查看了下对应的资产，发现是一个定制的ComfyUI WEB资产 。

Cybersecurity researchers have flagged a supply chain attack targeting a Microsoft Visual Studio Code (VS Code) extension called Ethcode that has been installed a little over 6,000 times. The compromise, per ReversingLabs, occurred via a GitHub pull request that was opened by a user named Airez299 on June 17, 2025. First released by 7finney in 2022, Ethcode is a VS Code extension that's used to

If you know what “o11y” is, you probably know what a site reliability engineer (SRE) does. Maybe you are one. Observability pipelines help SREs monitor and understand system behavior by using data such as metrics, events, logs, and traces (MELT) and Golden Signals. But as information technology (IT) infrastructure...

Check Point discovered around 500 suspected Scattered Spider phishing domains, suggesting the group is preparing to expand its targeting