Aggregator

关键词网络钓鱼在 LabHost 于 2024 年 4 月关闭之后，网络钓鱼即服务 (PhaaS) 领域出现了

关键词安全漏洞微软周一宣布，已将微软帐户 (MSA) 签名服务移至 Azure 机密虚拟机 (VM)，并且也正

关键词网络钓鱼网络钓鱼已不再仅仅局限于那些可疑的链接和措辞拙劣的电子邮件。

关键词Microsoft最新进展（2025年4月21日）：微软向客户发布通告，确认此次告警及账户锁定事件源于系

As SaaS and cloud-native work reshape the enterprise, the web browser has emerged as the new endpoint. However, unlike endpoints, browsers remain mostly unmonitored, despite being responsible for more than 70% of modern malware attacks. Keep Aware’s recent State of Browser Security report highlights major concerns security leaders face with employees using the web browser for most of their work.

A new malware named “RustoBot” has been discovered exploiting vulnerabilities in various router models to gain unauthorized access and initiate Distributed Denial of Service (DDoS) attacks. This advanced cyber-threat, first observed in January to February 2025, targets TOTOLINK and DrayTek devices, showcasing sophisticated techniques unlike previously known malware. Exploitation and Spread Strategy The botnet leverages […]

The post New Rust-Based Botnet Hijacks Routers to Inject Remote Commands appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Researchers have uncovered a sophisticated new variant of the notorious Lumma InfoStealer malware, employing advanced code flow obfuscation techniques to evade detection. This new development marks a significant escalation in cybercrime methodologies, potentially making it more challenging for traditional security measures to intercept or mitigate the impact of these theft-oriented attacks. Advanced Evasion Techniques This […]

The post Latest Lumma InfoStealer Variant Found Using Code Flow Obfuscation appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The notorious Magecart group has been identified by the Yarix Incident Response Team as the culprits behind a recent credit card data theft operation on an e-commerce platform. This latest assault on consumer data showcases the group’s evolving tactics to infiltrate and compromise online payment systems. Initial Access and Web Shell Deployment The attack began […]

The post Magecart Launches New Attack Using Malicious JavaScript to Steal Credit Card Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A vulnerability classified as problematic was found in Visual Composer Website Builder Plugin up to 45.10.0 on WordPress. This vulnerability affects unknown code. The manipulation leads to cross site scripting. This vulnerability was named CVE-2025-46254. The attack can be initiated remotely. There is no exploit available.

A vulnerability classified as problematic has been found in codepeople Appointment Booking Calendar Plugin up to 1.3.92 on WordPress. This affects an unknown part. The manipulation leads to cross-site request forgery. This vulnerability is uniquely identified as CVE-2025-46241. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability was found in e4jvikwp VikRestaurants Table Reservations and Take-Away Plugin up to 1.3.3 on WordPress. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cross-site request forgery. This vulnerability is handled as CVE-2025-46251. The attack may be launched remotely. There is no exploit available.

A vulnerability was found in Ataur R GutenKit Plugin up to 2.2.2 on WordPress. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting. This vulnerability is known as CVE-2025-46253. The attack can be launched remotely. There is no exploit available.

A vulnerability was found in CreativeMindsSolutions CM Answers Plugin up to 3.3.3 on WordPress and classified as problematic. This issue affects some unknown processing. The manipulation leads to cross-site request forgery. The identification of this vulnerability is CVE-2025-46246. The attack may be initiated remotely. There is no exploit available.

A vulnerability was found in CreativeMindsSolutions CM Ad Changer Plugin up to 2.0.5 on WordPress. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross-site request forgery. This vulnerability is traded as CVE-2025-46245. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability has been found in Michael Simple Calendar for Elementor Plugin up to 1.6.4 on WordPress and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. This vulnerability was named CVE-2025-46249. The attack can be initiated remotely. There is no exploit available.

A vulnerability, which was classified as problematic, was found in Vikas Ratudi VForm Plugin up to 3.1.14 on WordPress. This affects an unknown part. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2025-46250. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability, which was classified as problematic, has been found in Sirv CDN and Image Hosting Sirv Plugin up to 7.5.3 on WordPress. Affected by this issue is some unknown functionality. The manipulation leads to cross site scripting. This vulnerability is handled as CVE-2025-46233. The attack may be launched remotely. There is no exploit available.

A vulnerability classified as problematic was found in Link HTML Forms Plugin up to 1.5.2 on WordPress. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting. This vulnerability is known as CVE-2025-46236. The attack can be launched remotely. There is no exploit available.

A vulnerability was found in Jeff Starr Simple Download Counter Plugin up to 2.2 on WordPress. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to cross site scripting. The identification of this vulnerability is CVE-2025-46240. The attack may be initiated remotely. There is no exploit available.

A vulnerability classified as problematic has been found in sonalsinha21 SKT Blocks Plugin up to 2.0 on WordPress. Affected is an unknown function. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2025-46235. It is possible to launch the attack remotely. There is no exploit available.