Aggregator

HackerNews 编译，转载请注明出处： 据当地媒体报道，本周初俄罗斯农业与食品安全监管机构遭遇网络攻击，导致全国范围内的食品运输受阻。 俄罗斯联邦动植物卫生监督局表示，其在周三遭受了大规模分布式拒绝服务攻击，影响了其在线基础设施，包括用于追踪农产品和化学品流动的”VetIS”和”Saturn”系统。 据俄罗斯贸易媒体《Shopper’s》报道，此次中断导致食品交付严重延迟，因为电子兽医认证平台”Mercury”——VetIS系统的组成部分——一度无法访问。两家主要乳制品生产商和一家婴儿食品制造商向该媒体透露，他们在周三数小时内无法运输产品。 俄罗斯联邦动植物卫生监督局称，其网络中存储的数据”在完整性和机密性方面未受到威胁”。该机构未对事件进一步置评，目前尚无黑客组织声称对此次攻击负责。 根据俄罗斯法律，处理肉类、牛奶、鸡蛋和其他动物产品的公司必须在Mercury系统注册，并出具确认产品真实性和安全性的电子兽医证书。没有这些证书，供应商无法合法地向零售商或加工商交付货物。 一家公司经理表示，生产流通瘫痪了半日，并补充说由于缺乏允许在没有电子文件的情况下发货的应急程序，导致了经济损失。 俄罗斯联邦动植物卫生监督局否认了关于系统长时间中断的报道，并于周四表示Mercury系统正在”照常运行”。截至周五，该机构的网站可以访问，但尚不清楚所有受影响的系统是否已完全恢复。 据报道，这是Mercury系统今年第四次遭遇攻击。在6月份，类似事件曾迫使乳制品生产商恢复使用纸质证书，由于区域分销中心和主要零售商难以应对供应中断，引发了物流混乱。 据当地乳制品行业协会称，一些零售商当时拒绝接收没有电子文件的产品，而监管机构不明确的指导也导致了供应商的困惑。   消息来源：therecord.media； 本文由 HackerNews.cc 翻译整理，封面来源于网络； 转载请注明“转自 HackerNews.cc”并附上原文

Компания молчит о деталях инцидента, оставляя место для самых тревожных предположений.

攻防演练

详解LOLBAS特性，利用系统自带的合法功能来实施隐蔽操作

深入剖析线程池睡眠混淆与扫描器的工作机制，规避对应的检测

A vulnerability was found in airesvsg ACF to REST API Plugin up to 3.3.4 on WordPress and classified as problematic. This affects an unknown function. The manipulation results in insertion of sensitive information into sent data. This vulnerability is identified as CVE-2025-62979. The attack can be executed remotely. There is not any exploit available.

A vulnerability has been found in WPeka WP AdCenter Plugin up to 2.6.1 on WordPress and classified as problematic. The impacted element is an unknown function. The manipulation leads to cross site scripting. This vulnerability is referenced as CVE-2025-62984. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability, which was classified as critical, was found in KiotViet Sync Plugin up to 1.8.5 on WordPress. The affected element is an unknown function. Executing manipulation can lead to missing authorization. The identification of this vulnerability is CVE-2025-62978. The attack may be launched remotely. There is no exploit available.

A vulnerability, which was classified as problematic, has been found in llamaman Simple Pull Quote Plugin up to 1.6.3 on WordPress. Impacted is an unknown function. Performing manipulation results in cross site scripting. This vulnerability was named CVE-2025-62985. The attack may be initiated remotely. There is no available exploit.

A vulnerability classified as problematic was found in Sarah Giles Dynamic User Directory Plugin up to 2.3 on WordPress. This issue affects some unknown processing. Such manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2025-62982. The attack can be launched remotely. No exploit exists.

A vulnerability classified as problematic has been found in FanBridge Signup Plugin up to 0.6 on WordPress. This vulnerability affects unknown code. This manipulation causes cross-site request forgery. This vulnerability is handled as CVE-2025-62986. The attack can be initiated remotely. There is not any exploit available.

A vulnerability marked as critical has been reported in MDZ Persian Admnin Fonts Plugin up to 4.1.03 on WordPress. Affected by this issue is some unknown functionality. The manipulation leads to missing authorization. This vulnerability is traded as CVE-2025-62980. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability described as problematic has been identified in Builderall Builder for WordPress Plugin up to 3.0.1 on WordPress. This affects an unknown part. The manipulation results in cross site scripting. This vulnerability is known as CVE-2025-62987. It is possible to launch the attack remotely. No exploit is available.

A vulnerability labeled as problematic has been found in Sudar Muthu Posts by Tag Plugin up to 3.2.1 on WordPress. Affected by this vulnerability is an unknown functionality. Executing manipulation can lead to cross site scripting. This vulnerability appears as CVE-2025-62983. The attack may be performed from remote. There is no available exploit.

A vulnerability identified as critical has been detected in Codeless Slider Templates Plugin up to 1.0.3 on WordPress. Affected is an unknown function. Performing manipulation results in server-side request forgery. This vulnerability is reported as CVE-2025-62988. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability categorized as problematic has been discovered in CRM Perks WP Gravity Forms Zoho CRM and Bigin Plugin up to 1.2.8 on WordPress. This impacts an unknown function. Such manipulation leads to open redirect. This vulnerability is documented as CVE-2025-62981. The attack can be executed remotely. There is not any exploit available.

作者：GAURAB CHHETRI, SHRIYANK SOMVANSHI等 译者：知道创宇404实验室翻译组 原文链接：https://arxiv.org/pdf/2510.10436 随着美国国家标准与技术研究院（NIST）敲定ML-KEM、ML-DSA和SLH-DSA标准，后量子密码学（PQC）正从评估阶段迈向部署阶段。本综述全面涵盖了该领域从基础理论到实践应用的完整版图。首先，我们构...

A vulnerability was found in Andrea Landonio CloudSearch Plugin up to 3.0.0 on WordPress. It has been rated as problematic. This affects an unknown function. This manipulation causes cross-site request forgery. This vulnerability is registered as CVE-2025-62962. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability was found in iseremet Reloadly Plugin up to 2.0.1 on WordPress. It has been declared as problematic. The impacted element is an unknown function. The manipulation results in cross-site request forgery. This vulnerability is cataloged as CVE-2025-62956. The attack may be launched remotely. There is no exploit available.

A vulnerability was found in wpdevart Pricing Table builder Plugin up to 1.5.1 on WordPress. It has been classified as problematic. The affected element is an unknown function. The manipulation leads to cross-site request forgery. This vulnerability is listed as CVE-2025-62886. The attack may be initiated remotely. There is no available exploit.