Aggregator

DPRK Operatives Impersonate Professionals on LinkedIn to Infiltrate Companies

The Hackers News
4 months 1 week ago
The information technology (IT) workers associated with the Democratic People's Republic of Korea (DPRK) are now applying to remote positions using real LinkedIn accounts of individuals they're impersonating, marking a new escalation of the fraudulent scheme. "These profiles often have verified workplace emails and identity badges, which DPRK operatives hope will make their fraudulent
The Hacker News

AI 下红队安全工具开发及对接（大模型+MCP）实践

先知技术社区
4 months 1 week ago
本文主要是讲 AI 时代下的红队安全工具的开发，以及如何把安全工具接到大语言模型里。涉及到 MCP 客户端的结合，分布式的 MSF 的命令的执行，如何独立的 session 管理，代码优化的思路及调试等内容。以红队安全工具开发的细节处理为初始点，让初学者也能玩转 MCP。

CVE-2023-45556 | MyBB 1.8.33 Theme Management Theme Name cross site scripting (GHSA-4xqm-3cm2-5xgf / EUVD-2023-49848)

Vuldb Updates
4 months 1 week ago
A vulnerability, which was classified as problematic, was found in MyBB 1.8.33. This affects an unknown function of the component Theme Management. Executing a manipulation of the argument Theme Name can lead to cross site scripting. This vulnerability is tracked as CVE-2023-45556. The attack can be launched remotely. No exploit exists.
vuldb.com

FortiSandbox XSS Vulnerability Let Attackers Run Arbitrary Commands

Cyber Security News
4 months 1 week ago

Fortinet has disclosed a high-severity cross-site scripting (XSS) vulnerability in its FortiSandbox platform, tracked as CVE-2025-52436 (FG-IR-25-093), that enables unauthenticated attackers to execute arbitrary commands on affected systems. Dubbed an “Improper Neutralization of Input During Web Page Generation” issue (CWE-79), the flaw resides in the graphical user interface (GUI) component and scores a 7.9. At […]

The post FortiSandbox XSS Vulnerability Let Attackers Run Arbitrary Commands appeared first on Cyber Security News.

Guru Baran

Managed ad