Aggregator

A CVSS score 7.5 AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H severity vulnerability discovered by 'Nitesh Surana (niteshsurana.com) & Nelson William Gamazo Sanchez of Trend Research' was reported to the affected vendor on: 2025-07-10, 76 days ago. The vendor is given until 2025-11-07 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'kimiya' was reported to the affected vendor on: 2025-07-10, 76 days ago. The vendor is given until 2025-11-07 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'kimiya' was reported to the affected vendor on: 2025-07-10, 76 days ago. The vendor is given until 2025-11-07 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 7.0 AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'kimiya' was reported to the affected vendor on: 2025-07-10, 76 days ago. The vendor is given until 2025-11-07 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 7.0 AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'kimiya' was reported to the affected vendor on: 2025-07-10, 76 days ago. The vendor is given until 2025-11-07 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

The JFrog Security Research team has discovered a critical security vulnerability in mcp-remote, a widely used tool that enables Large Language Model clients to communicate with remote servers, potentially allowing attackers to achieve full system compromise through remote code execution. Severe Security Flaw Affects Popular AI Tool CVE-2025-6514, rated with a critical CVSS score of […]

The post Critical mcp‑remote Vulnerability Enables LLM Clients to Remote Code Execution appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

更多细节

当前环境出现异常问题，需完成验证后才能继续访问相关内容。

A shocking security vulnerability in McDonald’s AI-powered hiring system has exposed the personal information of millions of job applicants, after security researchers discovered they could access the entire database using the laughably weak password “123456.” The breach affects McHire.com, McDonald’s primary recruitment platform used by franchisees nationwide, where an AI chatbot named “Olivia” screens potential […]

The post McDonald’s AI Hiring Bot Exposed with ‘123456’ Password — Millions of Job‑Seekers’ Data at Risk appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Security researchers revealed the dangers of GitHub Device Code Phishing—a technique that leverages the OAuth 2.0 Device Authorization Grant flow. This method can turn a simple eight-digit code and a phone call into a full compromise of an organization’s GitHub repositories and software supply chain. Despite its simplicity, executing these attacks at scale has traditionally […]

The post GitPhish: New Tool Automates GitHub Device Code Phishing Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

在深圳通过“开办企业一窗通”平台注册公司后，默认生成的社保登记信息需手动完善银行账户等细节。首次登录深圳社保局网站需填写红色框内必填项完成更新操作。常见问题包括“隶属关系”选择（通常选“其他”）及绑定社康中心（输入关键词查询）。

There has been a significant increase in the global trend of corporations planning to integrate cybersecurity under the CISO or other executives, according to Fortinet. Growing maturity in OT cybersecurity processes and solutions (Source: Fortinet) OT security moves up the chain of command As accountability continues to shift into executive leadership, OT security is elevated to a high-profile issue at the board level. 52% of organizations report that the CISO is responsible for OT, up … More →

The post C-suites step up on OT cybersecurity, and it’s paying off appeared first on Help Net Security.

文章介绍了在Azure环境中创建C2（命令与控制）环境的方法，包括配置VM域名、允许HTTP和HTTPS流量、使用Apache代理保护C2端点，并通过Let's Encrypt生成SSL证书以启用HTTPS。

文章探讨Windows 10和11的未修复漏洞，分析其源于系统架构、硬件依赖及兼容性需求。报告聚焦BIOS/UEFI固件弱点、内核内存管理问题及旧协议兼容性风险，提供技术分析与缓解策略。随着2025年支持结束，这些漏洞威胁加剧。

Июль приносит новые знания!

当前环境出现异常,需完成验证后方可继续访问。

多维度呈现2025年上半年数据泄露态势全景

本文提出的预测性上下文敏感模糊测试方法，通过函数克隆实现碰撞规避，并结合静态数据流分析进行克隆点预测，既解决了传统上下文模糊测试中的碰撞与状态爆炸问题，又显著提升了漏洞发现能力。

文章描述了当前环境异常的情况，并提示用户完成验证后即可继续访问。