Aggregator

本文探讨威胁情报在网络安全中的应用，通过分析钓鱼邮件的头部信息、正文内容及链接，展示如何提取关键数据并整合用于提升组织安全防护能力。

文章介绍了HackerNoon平台上基于页面浏览量、互动和评论数排名的热门科技新闻。

网络监测数据显示，土耳其限制了大部分社交媒体和消息应用如 X、YouTube、Instagram、Facebook、TikTok、WhatsApp。原因是土耳其警方在反对党 The Republican People's Party (CHP)的总部附近设立了路障，CHP 呼吁民众集会抗议。政府对 CHP 的打压已长达数月，有数百人遭到逮捕，其中包括总统 Tayyip Erdogan 的主要政治对手、伊斯坦布尔市长 Ekrem Imamoglu。Imamoglu 今年三月的逮捕事件引发了大规模抗议。

快速浏览！2025.9.1—9.7安全动态周回顾。

需要明确的是，该漏洞并非ASP.NET本身的问题，而是因复用公开文档中，本不应用于生产环境的密钥所导致的配置错误漏洞。

当前环境出现异常，需完成验证后方可继续访问。

当前环境出现异常,需完成验证后才能继续访问。

Top cybersecurity conferences are introducing new rules that require researchers to formally address ethics in their work. Starting with the 2026 USENIX Security Symposium, all submissions must include a stakeholder-based ethics analysis. Other major venues such as IEEE Security and Privacy, and ACM CCS have also emphasized the importance of ethical review in recent calls for papers. This change reflects a growing concern that cybersecurity research can unintentionally cause harm. Research that exposes vulnerabilities, collects … More →

The post Cybersecurity research is getting new ethics rules, here’s what you need to know appeared first on Help Net Security.

Tenable has confirmed a data breach that exposed the contact details and support case information of some of its customers. The company stated the incident is part of a broader data theft campaign targeting an integration between Salesforce and the Salesloft Drift marketing application, which has affected numerous organizations. In a public statement, Tenable expressed […]

The post Tenable Confirms Data Breach – Hackers Accessed Customers’ Contact Details appeared first on Cyber Security News.

Уязвимость позволяет злоумышленникам с минимальными правами полностью захватить систему.

文章介绍了2024年《公司法》修订对企业注册资本实缴的要求及操作流程，强调了5个关键步骤：股东打款至公司账户、财务记账、缴纳印花税、验资报告（可选）及工商公示。同时说明了非货币出资的特殊流程及资金使用规范，并提醒企业注意合规风险。

InterceptSuite is an open-source, cross-platform network traffic interception tool designed for TLS/SSL inspection, analysis, and manipulation at the network level. “InterceptSuite is designed primarily for non-HTTP protocols, although it does support HTTP/1 and HTTP/2. It offers support for databases, SMTP, and custom protocols, and can manage unknown protocols and their TLS connections. Developed in C, it ensures efficient memory management and performance, utilising native SOCKS5 proxy support on Linux, Mac, and Windows, with OpenSSL for … More →

The post InterceptSuite: Open-source network traffic interception tool appeared first on Help Net Security.

两名作者起诉苹果公司未经授权使用其书籍训练人工智能系统，涉及Books3数据集中的19.6万本书籍。原告指控苹果未支付报酬且隐瞒数据来源，并寻求集体诉讼地位及赔偿。案件尚未确认集体诉讼资格。

清华、蚂蚁和新加坡南洋理工的研究人员在预印本平台 arxiv 上发表了一篇论文《Speculating LLMs’ Chinese Training Data Pollution from Their Tokens》，指出 OpenAI 的 GPT 系列模型使用的中文语料被成人和网络赌博内容污染。大模型使用从互联网上爬取的内容进行预训练，而爬取的内容不可避免会混入成人色情或网络赌博等污染内容。如果不仔细清理数据，那么在构建词汇表和执行分词（Performing tokenization）时可能会生成污染词元（polluted tokens），GPT 系列模型使用的中文词汇表就存在大量污染的中文词元。GPT-o1/o3/4.5/4.1/o4-mini 等模型都使用污染的中文语料库进行了训练。研究人员发现，在 GPT 模型语料库中，超过 23% 的长中文词元或者是成人内容或者是网络赌博，以 GPT-4o 为例，与日本 AV 女星波多野结衣相关的网页比例占到了训练语料库的 0.5%。

A vulnerability described as problematic has been identified in D-Link DIR-852 up to 1.00CN B09. Affected by this vulnerability is the function phpcgi_main of the file /getcfg.php of the component Device Configuration Handler. Such manipulation leads to information disclosure. This vulnerability only affects products that are no longer supported by the maintainer. This vulnerability is listed as CVE-2025-10093. The attack may be performed from remote. In addition, an exploit is available. Restrictive firewalling should be applied.

A vulnerability marked as problematic has been reported in Ricoh Streamline NX. Affected is an unknown function of the component HTTP Request Handler. This manipulation causes use of less trusted source. This vulnerability is tracked as CVE-2025-58422. The attack is possible to be carried out remotely. No exploit exists.

知名安卓启动器 Nova Launcher 的创始人 Kevin Barry 离开 Branch 公司，开源计划搁置。Branch 于 2022 年收购 Nova 后承诺若创始人离职将开源代码，但现要求 Kevin 停止相关工作。Nova 团队其余成员已被裁，未来开发或由 Branch 自行组织。

Защита критической инфраструктуры стала доступнее для СМБ.

Submit #644935 / VDB-323049

A vulnerability labeled as problematic has been found in Jinher OA up to 1.2. This impacts an unknown function of the file /c6/Jhsoft.Web.projectmanage/TaskManage/AddTask.aspx/?Type=add of the component XML Handler. The manipulation results in xml external entity reference. This vulnerability is identified as CVE-2025-10092. The attack can be executed remotely. Additionally, an exploit exists.