Aggregator

CVE-2019-25565 | Magiciso Magic Iso Maker 5.5 Registration Serial Code out-of-bounds write (Exploit 46656 / EUVD-2019-19878)

VulDB Recent Entries
3 weeks 4 days ago
A vulnerability was found in Magiciso Magic Iso Maker 5.5. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Registration Handler. Executing a manipulation of the argument Serial Code can lead to out-of-bounds write. This vulnerability is registered as CVE-2019-25565. The attack needs to be launched locally. Furthermore, an exploit is available.
vuldb.com

CVE-2019-25548 | BlueStacks 4.80.0.1060 Search return of pointer value outside of expected range (Exploit 46893 / EDB-46893)

VulDB Recent Entries
3 weeks 4 days ago
A vulnerability was found in BlueStacks 4.80.0.1060. It has been classified as problematic. Affected is an unknown function. Performing a manipulation of the argument Search results in return of pointer value outside of expected range. This vulnerability is cataloged as CVE-2019-25548. The attack must be initiated from a local position. Furthermore, there is an exploit available.
vuldb.com

CVE-2019-25552 | Cewe-Photoworld CEWE PHOTO SHOW 6.4.3 password hash instead of password for authentication (Exploit 46861 / EUVD-2019-19852)

VulDB Recent Entries
3 weeks 4 days ago
A vulnerability has been found in Cewe-Photoworld CEWE PHOTO SHOW 6.4.3 and classified as problematic. This affects an unknown function. This manipulation causes use of password hash instead of password for authentication. This vulnerability is tracked as CVE-2019-25552. The attack is possible to be carried out remotely. Moreover, an exploit is present.
vuldb.com

超微联合创始人因涉嫌走私英伟达 AI 芯片被捕

Solidot
3 weeks 4 days ago
美国司法部周四指控超微电脑联合创始人廖义贤（Yih-Shyan Liaw） ，以及员工张瑞增（Ruei-Tsang Chang）、孙廷伟（Ting-Wei Sun） 串谋，将内置高性能英伟达（Nvidia）GPU的计算机服务器走私至中国。根据起诉书，三人自约两年前起与他人共谋，通过一家位于东南亚的“中转”公司，向中国销售至少价值 25 亿美元的服务器。而美国法律禁止未经许可向中国销售此类设备。超微表示公司本身未被列为被告。公司已将廖义贤和张瑞增停职，并终止与合同工孙廷伟的合作。美国司法部表示，廖义贤和廷伟已被逮捕，张瑞增仍在逃。尽管超微未列为被告，但其股价周五暴跌。

FBI Warns Russian Hackers Target Signal, WhatsApp in Mass Phishing Attacks

The Hackers News
3 weeks 4 days ago
Threat actors affiliated with Russian Intelligence Services are conducting phishing campaigns to compromise commercial messaging applications (CMAs) like WhatsApp and Signal to seize control of accounts belonging to individuals with high intelligence value, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) and Federal Bureau of Investigation (FBI) said Friday. "The campaign
The Hacker News

中国帮助古巴发展太阳能

Solidot
3 weeks 4 days ago
古巴面临数十年来最严重的能源危机，而中国正在帮助古巴加速发展太阳能。中国对古巴的太阳能设备出口额从 2023 年的约 500 万美元飙升至 2025 年的 1.17 亿美元，且没有停止的迹象。太阳能发电量目前可能占到了古巴总发电量的 10%。古巴正成为全球太阳能发展速度最快的国家之一，其太阳能发电占比超过了美国在内的大多数国家。

Real Attack Alert Analysis: From Hidden Indicators to Actionable Threat Intelligence

Security Boulevard
3 weeks 4 days ago

Executive Overview Cyber threats are evolving rapidly, becoming more stealthy, automated, and difficult to detect using traditional security approaches. Attackers increasingly rely on legitimate system tools, encrypted communication, and internal reconnaissance to bypass defenses and operate unnoticed within enterprise environments. Modern organizations must shift toward intelligence-driven security that focuses on behavior, context, and correlation rather

The post Real Attack Alert Analysis: From Hidden Indicators to Actionable Threat Intelligence appeared first on Seceon Inc.

The post Real Attack Alert Analysis: From Hidden Indicators to Actionable Threat Intelligence appeared first on Security Boulevard.

Aniket Gurao

微软承诺减少 Copilot 集成，允许用户无限期推迟更新

Solidot
3 weeks 4 days ago
Windows 操作系统作为微软的核心产品其质量过去几年显著下降，每个月的例行安全更新在修复 bug 的同时还会带来额外问题，而微软还在不断给操作系统塞入用户并不需要的 AI 功能。微软今年早先时候承诺将致力于改进 Windows 的质量，现在官方博客公布了它准备采取哪些措施的细节：任务栏定制，任务栏不再固定在底部，可以移动到屏幕的任意一侧；减少记事本等应用中的 Copilot 集成；用户可以控制 Windows 更新时间，允许忽略更新或无限期推迟更新，重启或关机而不安装更新；等等。

Managed ad