Aggregator

A vulnerability was found in IBM Aspera Shares up to 1.10.0 PL6. It has been declared as problematic. This vulnerability affects unknown code of the component Email Handler. The manipulation leads to allocation of resources. This vulnerability was named CVE-2024-38316. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in SourceCodester Responsive E-Learning System 1.0. It has been classified as critical. This affects an unknown part of the file /elearning/delete_teacher_students.php. The manipulation of the argument id leads to sql injection. This vulnerability is uniquely identified as CVE-2020-36084. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

Ubuntu has announced its availability on Microsoft’s new tar-based Windows Subsystem for Linux (WSL) distribution architecture. This enhancement simplifies deployment and improves scalability, making Ubuntu on WSL more accessible and optimized for enterprise environments. Ubuntu has long been a popular choice among developers using WSL, thanks to its robust ecosystem and compatibility with development tools. […]

The post Ubuntu Officially Available on the Updated Windows Subsystem for Linux appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Officials Hope to Curb Global Fraud by Targeting Border Operations in Myanmar
In a drastic move to curb fraud along the Myanmar border, Thailand announced plans to cut power and telecommunications in border areas of Myanmar linked to scam operations. The move is aimed at crippling criminal syndicates running notorious call centers that orchestrate scams, financial fraud and human trafficking.

Mitigate Career Risk With a Self-Audit, Targeted Training and Real-World Testing
Changing jobs or going after that promotion can be difficult, even in a field like cybersecurity where the demand for skilled professionals is high. Often, the biggest career challenge is not that advanced persistent threat or the zero-day vulnerability. It's what we call "mental malware."

Guidance Intended to Help Companies Detect Compromises Faster
Countries forming the Five Eyes intelligence alliance outlined Tuesday minimum security requirements that edge device vendors should follow to enable swifter forensics analysis in the wake of cyberattacks. Edge devices have become the repeated target of nation-state hackers.

Lawsuit Claims R.I. Health Information Exchange Retaliated Against 'Whistleblower'
The former HIPAA compliance officer of Rhode Island's state health information exchange is suing the organization in a federal lawsuit claiming that she was terminated from her job after blowing the whistle on the HIE's alleged unlawful disclosures of patient information for research purposes.

Lawmakers Warn of Security Risks as DOGE is 'Running Roughshod' in Federal Systems
Democrats on Capitol Hill are calling on the White House to provide transparency into billionaire Elon Musk's attempts to shrink the U.S. government after reports indicated his unvetted aides gained access to key federal systems containing troves of sensitive data on millions of Americans.

新系统应提高开源项目维护的透明度，删除猜测并提供有关项目状态的明确信号。

安全攻防搭子，急聘ing~

当前环境出现异常，请完成验证后继续访问。

您好，请提供文章的具体内容或链接，以便我为您进行总结。

思科公司披露了其身份服务引擎（ISE）软件中的两个关键漏洞，CVE-2025-20124和CVE-2025-20125。

思科披露身份服务引擎（ISE）软件中的两个关键漏洞（CVE-2025-20124和CVE-2025-20125），CVSS评分分别为9.9和9.1。这些漏洞可能导致远程命令执行、权限提升及配置篡改。修复已发布，建议受影响用户立即升级以降低风险。

AMD 2024年第四季度财报显示数据中心收入首次超越英特尔，达38.6亿美元，同比增长69%。全年收入258亿美元，净利16.41亿，毛利率49%。得益于长期技术优势及市场惯性减弱。

AMD 公布了 2024 年第四季度和全年财报，报告其数据中心收入首次超过竞争对手英特尔。AMD 的数据中心 CPU 性能多年来一直领先于英特尔，然而数据中心市场有着强大的惯性，因此直到现在它在该领域的收入才首次超过芯片巨人。2024 年第四季度，AMD 数据中心业务净收入达到创纪录的 38.6 亿美元，同比增长 69%，环比增长 9%。相比下英特尔数据中心和 AI 业务部门收入为 34 亿美元。AMD 全年收入达到 258 亿美元，同比增长 14%，净收入 16.41 亿美元，毛利率 49%。

A vulnerability, which was classified as problematic, was found in manuelvicedo Forge Plugin up to 1.4.6 on WordPress. Affected is an unknown function. The manipulation leads to cross-site request forgery. This vulnerability is traded as CVE-2025-22703. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability has been found in Ederson Peka Unlimited Page Sidebars Plugin up to 0.2.6 on WordPress and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross-site request forgery. This vulnerability is known as CVE-2025-22688. The attack can be launched remotely. There is no exploit available.

A vulnerability was found in CheGevara Tags to Keywords Plugin up to 1.0.1 on WordPress and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cross-site request forgery. This vulnerability is handled as CVE-2025-22685. The attack may be launched remotely. There is no exploit available.