Aggregator

关键词安全漏洞技术人员近日在LG Innotek公司生产的LNV5110R型号监控摄像头中发现了一个重大安全漏

关键词勒索软件在BlackSuit勒索团伙基础设施遭执法部门查封后，一个名为"混沌"（Chaos）的新型勒索软

关键词数据泄露在机场候机时顺手将手机接入公共充电站？网络安全专家发出最新警告：这个看似平常的举动可能让你的隐私数据在0.133秒内沦陷。

The agency has two months to publish its final rule. It will not meet that mark, but a new CISA director has the tools to move the program forward.

The post CISA is facing a tight CIRCIA deadline. Here’s how Sean Plankey can attempt to meet it appeared first on CyberScoop.

IBM found that the global average cost of a data breach has fallen by 9% compared to 2024, driven by improved detection and containment

Joint international advisory warns of evolving social engineering tactics and new DragonForce ransomware deployment targeting commercial facilities A collaboration of international cybersecurity agencies issued an urgent updated advisory on July 29, 2025, highlighting the escalating threat posed by the Scattered Spider cybercriminal group, which has intensified attacks against critical infrastructure and commercial facilities sectors with […]

The post Global Authorities Shared IoCs and TTPs of Scattered Spider Behind Major VMware ESXi Ransomware Attacks appeared first on Cyber Security News.

Поддержка новых CPU-инструкций, улучшения файловых систем и звук через USB.

已修复

漏洞已修复

A vulnerability has been found in Kehua Charging Pile Cloud Platform 1.0 and classified as critical. This vulnerability affects unknown code of the file /home. The manipulation leads to improper authentication. This vulnerability was named CVE-2025-8348. The attack can be initiated remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability, which was classified as critical, was found in Kehua Charging Pile Cloud Platform 1.0. This affects an unknown part of the file /sys/task/findAllTask. The manipulation leads to sql injection. This vulnerability is uniquely identified as CVE-2025-8347. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.

The new Gunra group has expanded its attack surface beyond Windows PCs by releasing a Linux version of their virus, which was initially discovered in April 2025. This is a major uptick in the ransomware ecosystem. This development underscores the group’s strategic pivot toward cross-platform targeting, inspired by predecessors like Conti ransomware. Trend Micro’s threat […]

The post New Gunra Ransomware Linux Variant Launches 100 Encryption Threads with Partial Encryption Feature appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

一图速览《国家信息化发展报告（2024年）》

澳大利亚政府30日发表声明说，将通过立法把视频网站优兔（YouTube）列入16岁以下人群禁用的社交媒体目录。

网购时要用到实名信息但又不想透露个人隐私，生活中你是否也有过这样的烦恼？不久前，公安部等六部门联合公布的《国家网络身份认证公共服务管理办法》（以下简称《管理办法》）正式施行，为个人信息保护与数字经济发展提供了重要的制度遵循和实践指引。

近期，CNCERT和安恒信息联合监测到由“黑猫”黑灰产团伙发起的针对性攻击。该团伙将包含钓鱼软件的恶意网站推送到搜索结果前列，并诱导搜索引擎错误地将部分钓鱼网站标注为“官方”，极大地增强了其欺骗性。

7月30日，《国家信息化发展报告（2024年）》发布会在京召开。

Submit #617568 / VDB-318298

Submit #617567 / VDB-318297