Aggregator

德国公司研究揭示俄罗斯利用网络外包模式增强网络能力

6家金融机构的央行准备金账户遭到未授权访问

当前环境出现异常问题,需完成验证后才能继续访问相关内容或服务。

由于环境异常，请完成验证以继续访问。

为实现“以赛促学、以赛促评、以赛促改、以赛促管”和“普及密码知识、发现密码人才、壮大密码产业”的目标，提升密码从业人员综合实战能力和专业水平，推动院校密码专业课程创新，加快推动业务能力扎实、实战能力强的密码人才储备。

为引导互联网企业提升经营服务合规意识和服务水平，切实保障用户合法权益，7月3日，工业和信息化部组织中国互联网协会和中国信息通信研究院在京发布《移动互联网应用服务用户权益保护合规管理指南》。

中国国家网络与信息安全信息通报中心通过支撑单位发现一批境外恶意网址和恶意IP，境外黑客组织利用这些网址和IP持续对中国和其他国家发起网络攻击。

自DeepSeek发布以来引发业界广泛关注并获得高度评价，在同等参数规模下，该系统的推理能力已达到GTP-4的数倍水平。

当前环境出现异常状态，需完成验证后才能继续访问。

当前环境出现异常，请完成验证以继续访问。

当前环境出现异常，需完成验证后方可继续访问。

当前环境出现异常问题,需完成验证后方可继续访问系统.

Qantas said it is currently validating the contact, and has informed law enforcement

A vulnerability classified as problematic has been found in PHP Ashnews. This affects an unknown part. The manipulation leads to file inclusion. This vulnerability is uniquely identified as CVE-2006-0524. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

Security researchers from the Socket Threat Research Team have uncovered a sophisticated network of eight malicious Firefox browser extensions that actively steal OAuth tokens, passwords, and spy on users through deceptive tactics. The discovery reveals a coordinated campaign that exploits popular gaming titles and utility applications to compromise user security across the Firefox ecosystem. Major […]

The post 8 New Malicious Firefox Extensions Steal OAuth Tokens, Passwords and Spy on Users appeared first on Cyber Security News.

上周关注度较高的产品安全漏洞(20250630-20250706)

国家信息安全漏洞共享平台（以下简称CNVD）本周共收集、整理信息安全漏洞695个，其中高危漏洞345个、中危漏洞306个、低危漏洞44个。

A vulnerability has been found in Campcodes Complaint Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /users/index.php. The manipulation of the argument Username leads to sql injection. This vulnerability is known as CVE-2025-7119. The attack can be launched remotely. Furthermore, there is an exploit available.

A vulnerability has been found in SUR-FBD CMMS up to 2025.03.26 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component DLL File. The manipulation leads to use of hard-coded password. This vulnerability is known as CVE-2025-3920. It is possible to launch the attack on the local host. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in mndpsingh287 Frontend File Manager Plugin up to 23.2 on WordPress. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to basic cross site scripting. This vulnerability was named CVE-2025-27358. The attack can be initiated remotely. There is no exploit available.