Aggregator

Zr.Ms. Evertsen escorteerde een Russisch marinefregat op de Noordzee. Het ging om de Admiral Golovko, die op weg was naar huis. Een overzicht van Defensieoperaties in de week van 23 tot met 29 april 2025.

掌握 GPT 大模型与 CodeQL 结合的审计方法，提高审计效率和准确性。

英国零售巨头玛莎百货遭 Scattered Spider 黑客组织网络攻击，致多系统瘫痪，线上订单暂停，运营受阻。

看雪论坛作者ID：pureGavin【译】

Mozilla has released Firefox 138, addressing several high-severity security vulnerabilities while introducing long-awaited features, including improved profile management.  Security researchers identified multiple critical flaws that could allow attackers to escalate privileges or bypass security mechanisms, prompting this significant security update, which was released on April 29, 2025. High-Impact Security Flaws in Firefox and Thunderbird The […]

The post Firefox 138 Released With Fix for Multiple High-Severity Vulnerabilities appeared first on Cyber Security News.

Ivanti, Cisco и PAN — хакеры обошли тех, кто должен был защищать.

Link11 has fully integrated DOSarrest and Reblaze to become one of Europe’s leading providers of network security, web application security, and application performance Link11, DOSarrest, and Reblaze have combined their strengths into a single, integrated platform with a new brand identity. The result: a consistent user experience, maximum efficiency, and seamless security. As a European […]

The post Link11 brings three brands together on one platform with new branding appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

JPMorgan’s CISO has argued that SaaS apps represent a growing risk to businesses, “quietly enabling cyber attackers”

Link11 has fully integrated DOSarrest and Reblaze to become one of Europe’s leading providers of network security, web application security, and application performance Link11, DOSarrest, and Reblaze have combined their strengths into a single, integrated platform with a new brand identity. The result: a consistent user experience, maximum efficiency, and seamless security. As a European […]

The post Link11 brings three brands together on one platform with new branding appeared first on Cyber Security News.

根据 Appfigures 的分析，自 2024 年以来 Google Play 应用商店的可用应用数量从 340 万降至 180 万，下降了多达 47%。Google 接受采访时证实这一结果部分是由于其推行的新政策导致的。它实施的新政策包括扩充验证要求，对新的个人开发者账户进行应用测试，扩大人工审核范围检查出试图欺骗或诈骗用户的应用。Google 还将 AI 用于威胁检测、加强隐私政策、改进开发者工具等。这些政策阻止了 236 万个应用在商店上架，封禁了逾 15.8 万个试图发布有害应用的开发者账户。此外欧盟的新政策还要求在开发者在应用上公布其名字和地址，违反者从欧盟地区的应用商店下架。

特朗普政府执行了一系列不利于网络安全的举措使得美国网络安全产业震荡不安

共发现75个已被实际利用的零日漏洞

A vulnerability was found in Delta Electronics ISPSoft up to 3.20. It has been declared as critical. This vulnerability affects unknown code of the component ISP File Parser. The manipulation leads to out-of-bounds write. This vulnerability was named CVE-2025-4125. The attack can be initiated remotely. There is no exploit available.

A vulnerability was found in Delta Electronics ISPSoft up to 3.20. It has been classified as critical. This affects an unknown part of the component ISP File Parser. The manipulation leads to out-of-bounds write. This vulnerability is uniquely identified as CVE-2025-4124. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability was found in Delta Electronics ISPSoft up to 3.20 and classified as critical. Affected by this issue is some unknown functionality of the component DVP File Parser. The manipulation leads to out-of-bounds write. This vulnerability is handled as CVE-2025-22883. The attack may be launched remotely. There is no exploit available.

A vulnerability has been found in Delta Electronics ISPSoft up to 3.20 and classified as critical. Affected by this vulnerability is an unknown functionality of the component DVP File Parser. The manipulation leads to stack-based buffer overflow. This vulnerability is known as CVE-2025-22884. The attack can be launched remotely. There is no exploit available.

A vulnerability, which was classified as critical, was found in Delta Electronics ISPSoft up to 3.20. Affected is an unknown function of the component CBDGL File Parser. The manipulation leads to stack-based buffer overflow. This vulnerability is traded as CVE-2025-22882. It is possible to launch the attack remotely. There is no exploit available.