Aggregator

美国禁止向中国出售半导体设计软件

Solidot
3 months 1 week ago
美国政府要求本国公司停止向中国出售半导体设计软件。此举旨在加大中国开发先进芯片的难度。美国商务部工业和安全局致函包括 Cadence、Synopsys 和 Siemens EDA 在内的电子设计自动化（EDA）公司，要求停止向中国供应其技术。目前尚不清楚是否所有美国 EDA 公司都收到了信函。Synopsys CEO Sassine Ghazi 在周三的二季度财报电话会议上回应称该公司没有收到商务部的通知。Cadence、Synopsys 和 Siemens EDA 占到了中国 EDA 市场约八成的份额，其中 Synopsys 2024 财年中国市场销售额近 10 亿美元，约占其总收入的 16%。Cadence 的中国市场销售额为 5.5 亿美元，占其收入的 12%。更新：Synopsys 通知中国员工停止在华服务和销售，停止接受新订单，以遵守美国新的出口限制。

Critical Cisco IOS XE Flaw Permits Arbitrary File Upload — PoC Released

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
3 months 1 week ago

A critical security vulnerability, tracked as CVE-2025-20188, has been discovered in Cisco IOS XE Wireless LAN Controllers (WLCs), threatening enterprise wireless infrastructures worldwide. This flaw, scoring a maximum 10.0 on the CVSS scale, allows unauthenticated remote attackers to upload arbitrary files and potentially execute commands as root, granting full control over affected devices. The vulnerability […]

The post Critical Cisco IOS XE Flaw Permits Arbitrary File Upload — PoC Released appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Anupriya

North Korean IT Workers Exploit Legitimate Software and Network Tactics to Evade EDR

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
3 months 1 week ago

A North Korean IT worker, operating under a false identity, was uncovered infiltrating a Western organization with a sophisticated remote-control system. This incident, exposed during a U.S. federal raid on a suspected laptop farm, showcases a chilling trend where adversaries leverage legitimate software and low-level network protocols to evade traditional Endpoint Detection and Response (EDR) […]

The post North Korean IT Workers Exploit Legitimate Software and Network Tactics to Evade EDR appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Aman Mishra

New Rust-Based InfoStealer Uses Fake CAPTCHA to Deliver EDDIESTEALER

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
3 months 1 week ago

A newly discovered Rust-based infostealer, dubbed EDDIESTEALER, has been uncovered by Elastic Security Labs, spreading through a sophisticated social engineering tactic involving fake CAPTCHA verification pages. Mimicking legitimate CAPTCHA systems like Google’s reCAPTCHA, these malicious prompts deceive users into executing harmful PowerShell scripts, ultimately deploying the infostealer on Windows systems to harvest sensitive data such […]

The post New Rust-Based InfoStealer Uses Fake CAPTCHA to Deliver EDDIESTEALER appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Aman Mishra

From Swipe to Scare: Data Privacy and Cyber Security Concerns in Dating Apps

Security Boulevard
3 months 1 week ago

Dating apps changed everything; didn’t they? They’ve truly revolutionised how we discover love and make connections. Consider this: over 323 million people worldwide use them—millions swiping, matching, and meeting. But there’s a catch before you get hold of your prince charming or princess! Behind those flattering photos and witty bios? A shadowy digital world over […]

The post From Swipe to Scare: Data Privacy and Cyber Security Concerns in Dating Apps appeared first on Security Boulevard.

Harman Singh

Qilin

Dark Feed IO
3 months 1 week ago

You must login to view this content

cohenido

Stack Overflow 将测试付费给专家回答问题

Solidot
3 months 1 week ago
自 2020 年 4 月以来，著名编程问答社区 Stack Overflow 上的问答量下降了九成以上。为了在生成式 AI 时代生存下来，Stack Overflow 计划采取激进的措施，其中包括：恢复聊天功能，加强社区成员之间的联系；个性化网站，可能将整合视频、博客、问答等内容；对讨论更为开放；授权 Stack Overflow 内容给 AI 公司训练模型；测试付费给专家回答问题。

ConnectWise suffered a cyberattack carried out by a sophisticated nation state actor

Security Affairs
3 months 1 week ago
ConnectWise detected suspicious activity linked to a nation-state actor, impacting a small number of its ScreenConnect customers. ConnectWise revealed it had detected suspicious activity linked to an advanced nation-state actor. The company confirmed that the attack impacted a small number of its ScreenConnect customers. “ConnectWise recently learned of suspicious activity within our environment that we […]
Pierluigi Paganini

Ensuring Data Security in Cloud Storage and Collaboration Platforms

Cyber Security News
3 months 1 week ago

A surge in cloud adoption has been matched by escalating security challenges, with 82% of data breaches now involving cloud-stored information and 60% of organizations reporting public cloud-related incidents in 2024.  As enterprises increasingly rely on platforms like Google Drive, Microsoft Teams, and Slack for collaboration, threat actors have refined attacks targeting misconfigurations, phishing vulnerabilities, […]

The post Ensuring Data Security in Cloud Storage and Collaboration Platforms appeared first on Cyber Security News.

CISO Advisory

U.S. Sanctions Funnull for $200M Romance Baiting Scams Tied to Crypto Fraud

The Hackers News
3 months 1 week ago
The U.S. Department of Treasury's Office of Foreign Assets Control (OFAC) has levied sanctions against a Philippines-based company named Funnull Technology Inc. and its administrator Liu Lizhi for providing infrastructure to conduct romance baiting scams that led to massive cryptocurrency losses. The Treasury accused the Taguig-headquartered company of enabling thousands of websites involved in
The Hacker News

Managed ad