Aggregator
CVE-2025-46099 | Pluck CMS up to 4.7.20-dev Albums Module albums.site.php unrestricted upload
Akira
You must login to view this content
CVE-2025-8069 | Amazon AWS Client VPN up to 5.2.1 on Windows OpenSSL Configuration File default permission (AWS-2025-014 / EUVD-2025-22458)
CVE-2025-36117 | IBM Db2 Mirror for i 7.4/7.5/7.6 session fixiation
CVE-2015-10141 | Xdebug up to 2.5.5 Debugger Protocol Command os command injection (EDB-44568)
CVE-2025-46171 | vBulletin 3.8.7 Buddy List misc.php?do=buddylist denial of service (EUVD-2025-22462)
CVE-2018-25114 | osCommerce Online Merchant 2.3.4.1 HTTP POST Requst install_4.php unrestricted upload (Exploit 44374 / EDB-44374)
CVE-2025-36116 | IBM DB2 Mirror for i 7.4/7.5/7.6 Websocket Connection missing origin validation in websockets
气候变化导致森林火灾日益常见
Silicon Valley Engineer Pleads Guilty to Stealing Missile Detection Data for China
A dual U.S.-China citizen and former Silicon Valley engineer has pleaded guilty to stealing critical military technology secrets designed to protect American national security interests. Chenguang Gong, 59, of San Jose, admitted to transferring over 3,600 classified files containing advanced missile detection and defense technologies to personal storage devices, with intentions to benefit the Chinese […]
The post Silicon Valley Engineer Pleads Guilty to Stealing Missile Detection Data for China appeared first on Cyber Security News.
Operation CargoTalon Targets Russian Aerospace & Defense to Deploy EAGLET Implant
SEQRITE Labs’ APT-Team has uncovered a sophisticated spear-phishing campaign dubbed Operation CargoTalon, targeting employees at Russia’s Voronezh Aircraft Production Association (VASO), a key aerospace entity. The operation leverages malicious attachments disguised as товарно-транспортная накладная (TTN) logistics documents, critical for Russian supply chains. Discovered on June 27 via VirusTotal hunting, the campaign employs a malicious EML […]
The post Operation CargoTalon Targets Russian Aerospace & Defense to Deploy EAGLET Implant appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
Исчез бог — погибли дети. Самый страшный миф древнего Шумера наконец прочитан
How AI, Automation and Real-Time Tools Are Redefining Claims
AI, automation and real-time tools are reshaping insurance claims. "We blend technology with empathy to deliver faster, smarter and more transparent claims," said Sachin Joshi, president of claims, operations and customer service at Liberty General Insurance.
US Nuclear Agency Breach Tied to SharePoint Zero-Days
The U.S. government agency that maintains and designs America's nuclear weapons was reportedly breached by attackers exploiting zero-day flaws in on-premises Microsoft SharePoint servers, with researchers now counting over 400 victims, including European and Middle Eastern governments.
ENISA Turns to Experts to Steer EU Cyber Regulations
Beginning Aug. 1, European Union Agency for Cybersecurity, ENISA, will launch a new Advisory Group composed of 26 independent experts to help guide the EU’s cybersecurity strategy through 2027. Their work will support the rollout of the NIS2 Directive and the Cyber Resilience Act.
SecWiki News 2025-07-23 Review
更多最新文章,请访问SecWiki
NPM package ‘is’ with 2.8M weekly downloads infected devs with malware
美国政府考虑重新评估 H-1B 签证签发方式
Interlock ransomware gang is ramping up activity, CISA warns
The Interlock ransomware gang is aggressively targeting businesses and critical infrastructure in North America and Europe, according to a new warning from the US Cybersecurity and Infrastructure Security Agency (CISA). stepping up its attacks and changing tactics. The agency issued an advisory describing how Interlock picks its victims on the basis of opportunity, carrying out […]
The post Interlock ransomware gang is ramping up activity, CISA warns appeared first on Ransomware.org.