Aggregator

5家卫生院因医疗信息安全制度保障措施不健全被处罚，4人因泄露公民个人健康信息被处罚。

约280万人身份信息、健康信息、医保信息等泄露

Company Overview Aurascape is a cybersecurity startup founded in 2023 and headquartered in Santa Clara, California, USA. The company was co-founded by senior security experts and engineers from world-class technology companies such as Palo Alto Networks, Google, and Amazon. The team has deep expertise in the fields of network security, artificial intelligence, and network infrastructure, […]

The post RSAC 2025 Innovation Sandbox | Aurascape: Reconstructing the Intelligent Defense Line of AI Interactive Visibility and Native Security appeared first on NSFOCUS, Inc., a global network and cyber security leader, protects enterprises and carriers from advanced cyber attacks..

The post RSAC 2025 Innovation Sandbox | Aurascape: Reconstructing the Intelligent Defense Line of AI Interactive Visibility and Native Security appeared first on Security Boulevard.

Microsoft has announced the retirement of Entra Permissions Management (formerly CloudKnox), with sales ending June 30, 2025. EPM offered valuable visibility into cloud permissions, helping teams identify overprivileged identities across AWS, Azure, and GCP. But for many organizations, that visibility came with significant manual overhead: Policy rewrites, change windows, and time-consuming investigations. As EPM sunsets, […]

The post A Smarter Alternative to Entra Permissions Management appeared first on Security Boulevard.

Аудио, UI и педали — всё в одном корпусе с open-source корнями.

VulnCheck’s latest report for Q1 2025 has identified 159 Common Vulnerabilities and Exposures (CVEs) publicly disclosed as exploited in the wild for the first time. Alarmingly, 28.3% of these Known Exploited Vulnerabilities (KEVs) saw evidence of exploitation within just one day of their CVE disclosure, underscoring the lightning-fast pace at which threat actors capitalize on […]

The post 159 CVEs Exploited in the Wild in Q1 2025, 8.3% Targeted Within 1-Day Vulnerabilities Exploited appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Cybersecurity researchers are warning about a new malware called DslogdRAT that's installed following the exploitation of a now-patched security flaw in Ivanti Connect Secure (ICS). The malware, along with a web shell, were "installed by exploiting a zero-day vulnerability at that time, CVE-2025-0282, during attacks against organizations in Japan around December 2024," JPCERT/CC researcher Yuma

A vulnerability has been found in Blogengine.NET up to 3.3.8.0 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to open redirect. This vulnerability was named CVE-2023-33405. The attack needs to be initiated within the local network. There is no exploit available.

A vulnerability was found in Apple macOS up to 13.4.0. It has been rated as critical. This issue affects some unknown processing of the component WebKit. The manipulation leads to type confusion. The identification of this vulnerability is CVE-2023-32439. The attack may be initiated remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Apple iOS and iPadOS up to 16.5.0. Affected by this vulnerability is an unknown functionality of the component WebKit. The manipulation leads to type confusion. This vulnerability is known as CVE-2023-32439. The attack can be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Apple Safari up to 16.5.0. Affected by this issue is some unknown functionality of the component WebKit. The manipulation leads to type confusion. This vulnerability is handled as CVE-2023-32439. The attack may be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in MyThemeShop WP Quiz Plugin up to 2.0.10 on WordPress. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2025-46482. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability was found in AlphaEfficiencyTeam Custom Login and Registration Plugin up to 1.0.0 on WordPress and classified as problematic. This issue affects some unknown processing. The manipulation leads to missing authorization. The identification of this vulnerability is CVE-2025-46535. The attack may be initiated remotely. There is no exploit available.

A vulnerability, which was classified as critical, has been found in Oracle Secure Global Desktop 5.4/5.5. This issue affects some unknown processing of the component Web Services. The manipulation leads to server-side request forgery. The identification of this vulnerability is CVE-2019-0227. The attack can only be initiated within the local network. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

Как дипфейки устроили санкциям выходной.

A hacker collective known as R00TK1T claims to have breached TikTok’s user database, allegedly leaking login information for over 900,000 users. The group, which has previously made waves in the hacking community with bold claims—often with little substantiated evidence—has taken to underground forums to boast about their latest exploit. Alleged Account Deletions and Data Leak […]

The post Hackers Claim TikTok Breach, Leak Over 900,000 Usernames and Passwords appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

As cloud environments become more complex, ensuring robust security for your cloud infrastructure is no longer an option, but a necessity. 

The post Cloud Infrastructure Security: Threats, Challenges & How to Protect Your Data  appeared first on Security Boulevard.

A vulnerability classified as problematic has been found in POS Codekop 2.0. This affects an unknown part of the file print.php. The manipulation of the argument nm_member leads to cross site scripting. This vulnerability is uniquely identified as CVE-2023-36346. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability classified as problematic has been found in PHPGurukul Student Study Center Management System 1.0. Affected is an unknown function of the component Admin Profile Page. The manipulation of the argument Admin Name leads to cross site scripting. This vulnerability is traded as CVE-2023-33580. It is possible to launch the attack remotely. Furthermore, there is an exploit available.