Aggregator

Reddit 诞生二十周年

Solidot
4 months ago
2005 年，刚从弗吉尼亚大学毕业的 Steve Huffman 和 Alexis Ohanian 受 Delicious（现已关闭的社交书签服务）和 Slashdot 等网站的启发，打造了一个融合两者优点的平台，既能分享即时新闻又能促进活跃的社区讨论，而讨论的话题可以是用户关心的任何主题。他们称之为“互联网的首页（the front page of the internet）”，一个简洁的、用户驱动的、任何人都可以提交内容、由社区而不是算法或编辑通过投票和讨论决定最重要内容的平台。网站早期与 Aaron Swartz 的 Infogami 合并引入评论功能，为我们今天所知的 Reddit 奠定了基础。Steve Huffman 称，Reddit 之所以能成功，其核心在于真实的用户。这种真实性是 Reddit 的价值所在。Reddit 的重心永远是成为一个值得信赖的人类交流平台。

Microsoft Defender Vulnerability Allows Attackers to Elevate Privileges

Cyber Security News
4 months ago

A newly disclosed security flaw in Microsoft Defender for Endpoint could allow attackers with local access to elevate their privileges to SYSTEM level, potentially gaining complete control over affected systems.  The vulnerability, tracked as CVE-2025-26684, was patched as part of Microsoft’s May 2025 Patch Tuesday security updates released yesterday. Security researchers identified the vulnerability as […]

The post Microsoft Defender Vulnerability Allows Attackers to Elevate Privileges appeared first on Cyber Security News.

Kaaviya

Google Threat Intelligence Launches Actionable Technique To Hunt for Malicious .Desktop Files

Cyber Security News
4 months ago

Google Threat Intelligence has launched a new blog series aimed at empowering security professionals with advanced threat hunting techniques, kicking off with a deep dive into detecting malicious .desktop files on Linux systems. .desktop files, standard configuration files in Linux desktop environments, define how applications are launched and displayed. Following the Desktop Entry Specification, these […]

The post Google Threat Intelligence Launches Actionable Technique To Hunt for Malicious .Desktop Files appeared first on Cyber Security News.

Balaji N

2025全景图权威发布｜梆梆安全连续十二次蝉联榜单，引领移动安全、车联网安全、数据安全等关键领域

嘶吼
4 months ago
国内网络安全权威机构安全牛于近日正式发布《中国网络安全行业全景图（第十二版）》。梆梆安全凭借技术研发优势、专业安全服务能力及移动安全领域深耕成果，连续十二次上榜，入选11大类安全领域及38项细分赛道，品牌影响力和技术竞争力再获权威印证。

安全牛全景图对于网络安全产业的阶段性发展具有关键的里程碑意义。历经十年12版迭代，收录311家厂商、2223项二级细分领域。 第十二版基于GB/T 25066-2020标准，更突出网络安全技术的动态演进与场景化应用，更注重细分领域的技术纵深能力与案例实践价值，对于成熟、标准的产品考量其市场应用的典型性和代表性，对于新技术产品考量其技术先进性和创新能力。

安全牛对第十二版全景图的审核调研发现，中国网络安全产业正在经历一个重要的转变，即从“合规驱动”向“需求驱动”过渡。在这一过程中，金融、电力、电信运营商、工业等关键行业成为了引领者，驱动安全厂商具备更高的安全技术产品化和工程化水平。在非传统IT领域，如工业领域的OT网络、智能网联车领域的车联网，以及智能设备领域的视频网络等，安全需求及项目机会呈现爆发式增长趋势。

梆梆安全入选详情

移动安全：移动终端管理、移动应用安全、移动威胁防御（MTD）

物联网安全：车联网安全、视频监控安全、其他物联网安全

数据安全：数据防泄漏、数据分类分级、数据安全治理服务、数据安全评估和检查、个人信息保护

应用与业务安全：API安全、应用安全监测、抗BOT、支付安全、欺诈监测和识别、其它业务安全

软件供应链安全：开发流程安全管控、DevSecOps、静态安全测试、动态/模糊安全测试、交互式安全测试

网络安全服务：渗透测试/众测、安全合规、安全集成、安全咨询与规划、安全意识与培训、攻防演练、安全靶场、应急响应与重保服务、安全测评与认证

安全支撑技术与体系：威胁情报

密码技术及应用：密钥管理、加解密

安全管理与运营：安全运营管理中心（SOC）、网络空间资产测绘

网络与通信安全：通信传输安全

计算环境安全：漏洞检测与管理

移动安全

物联网安全

数据安全

应用与业务安全

软件供应链安全

网络安全服务

安全支撑技术与体系

密码技术及应用

安全管理与运营

网络与通信安全

计算机环境安全

梆梆安全在网络安全领域深耕多年，聚焦移动应用安全主航道，深度布局数据安全、物联网安全、车联网安全、API安全等前沿方向，通过持续深化核心技术攻关完成产品体系迭代升级、安全服务专业化，在关键基础设施领域形成可验证的解决方案，依托核心自主知识产权为各行业客户安全防护体系建设提供有效支撑。面向数字化纵深发展的新阶段，梆梆安全将继续以推动产业良性发展为目标，强化技术纵深能力，驱动行业高质量发展。

梆梆安全

Nobara Linux 42 brings performance boost and better hardware support

Help Net Security
4 months ago

The Nobara Project has released a new version of its Linux distribution, bringing updated packages, performance improvements, and a few visual tweaks aimed at making life easier for users who want a system that works well out of the box. Nobara Linux 42 includes changes that will be especially useful for anyone who wants a preconfigured Fedora-based desktop with minimal setup. Nobara is a custom version of Fedora Linux that includes extra drivers, packages, and … More →

The post Nobara Linux 42 brings performance boost and better hardware support appeared first on Help Net Security.

Help Net Security

CVE-2025-2033 | code-projects Blood Bank Management System 1.0 view_donor.php donor_id sql injection

Vuldb Updates
4 months ago
A vulnerability, which was classified as critical, was found in code-projects Blood Bank Management System 1.0. Affected is an unknown function of the file /user_dashboard/view_donor.php. The manipulation of the argument donor_id leads to sql injection. This vulnerability is traded as CVE-2025-2033. It is possible to launch the attack remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2025-2037 | code-projects Blood Bank Management System 1.0 delete_requester.php requester_id sql injection

Vuldb Updates
4 months ago
A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /user_dashboard/delete_requester.php. The manipulation of the argument requester_id leads to sql injection. This vulnerability was named CVE-2025-2037. The attack can be initiated remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2025-2038 | code-projects Blood Bank Management System 1.0 /upload/ exposure of information through directory listing

Vuldb Updates
4 months ago
A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /upload/. The manipulation leads to exposure of information through directory listing. The identification of this vulnerability is CVE-2025-2038. The attack may be initiated remotely. Furthermore, there is an exploit available.
vuldb.com

Managed ad