Aggregator

A vulnerability classified as problematic has been found in Contact Form Builder with Drag & Drop Plugin up to 2.4.2 on WordPress. Affected is an unknown function of the component Setting Handler. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2025-3201. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Hitachi Infrastructure Analytics Advisor and Ops Center Analyzer. It has been rated as critical. This issue affects some unknown processing of the component Data Center Analytics. The manipulation leads to use of less trusted source. The identification of this vulnerability is CVE-2025-1245. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in CTT Expresso para WooCommerce Plugin up to 3.2.12 on WordPress. It has been classified as problematic. This affects an unknown part of the component Setting Handler. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2024-6478. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Urban Base Z-Downloads Plugin up to 1.11.4 on WordPress. It has been declared as critical. This vulnerability affects unknown code. The manipulation leads to unrestricted upload. This vulnerability was named CVE-2024-8699. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Simple Video Directory Plugin up to 1.4.2 on WordPress and classified as critical. Affected by this issue is some unknown functionality. The manipulation leads to sql injection. This vulnerability is handled as CVE-2024-6809. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in EventPrime Plugin up to 3.4.x on WordPress and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to improper access controls. This vulnerability is known as CVE-2024-4665. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in ImageMagick Engine Plugin up to 1.7.10 on WordPress. Affected is an unknown function. The manipulation of the argument cli_path leads to os command injection. This vulnerability is traded as CVE-2024-6486. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

Even after their zero-day turned into an n-day, attackers known as Marbled Dust or Sea Turtle continued to spy on military targets that had failed to patch Output Messenger.

A vulnerability, which was classified as critical, has been found in Wibu CodeMeter up to 8.30.. This issue affects some unknown processing of the component Control Center. The manipulation leads to least privilege violation. The identification of this vulnerability is CVE-2025-47809. It is possible to launch the attack on the local host. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic was found in Payment Gateway for Telcell Plugin up to 2.0.1 on WordPress. This vulnerability affects unknown code. The manipulation of the argument api_url leads to open redirect. This vulnerability was named CVE-2023-6786. The attack can be initiated remotely. There is no exploit available.

A vulnerability classified as problematic has been found in DumbWareio DumbDrop. This affects an unknown part of the component File Upload. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2025-47929. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

Cybersecurity giant Proofpoint has announced its agreement to acquire Hornetsecurity Group, a leading European provider of AI-powered Microsoft 365 security solutions. The deal, reportedly valued at $1 billion, is expected to close in the second half of 2025, although exact financial terms were not publicly disclosed in the announcement. This strategic move significantly strengthens Proofpoint’s […]

The post Proofpoint Buys Hornetsecurity, A Microsoft 365 Security Specialist For $1 Billion appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Tor Project has unveiled oniux, a new command-line utility that provides comprehensive network isolation for Linux applications, ensuring all traffic routes exclusively through the Tor network. This tool aims to eliminate the risk of accidental data leaks that can occur with traditional SOCKS proxy configurations, offering enhanced privacy protection for users handling sensitive information. Oniux […]

The post Tor Oniux Tool Offers Anonymous Linux App Traffic appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Пока вы работали в Excel, кто-то уже получил права администратора на вашем ПК.

在陆地生态系统中，菌根真菌与植物根系形成了广泛的共生关系，其菌丝网络——共同菌根网络（CMNs），长期以来被认为是植物间交换氮、磷等养分的关键通道。最新研究发现，它还能传递防御信号。科学家发现，当番茄植株感染晚疫病菌时，通过丛枝菌根（AM）网络相连的邻近健康植株，能在24小时内激活与茉莉酸（JA）和水杨酸（SA）相关的防御基因，且这一过程完全依赖菌丝的直接连接。类似现象在柑橘、苜蓿等多种植物中也得到了验证：遭受蚜虫侵袭的豆科植物可通过AM网络触发邻近植株释放吸引蚜虫天敌的化合物，信号传递最快可在6小时内完成；当番茄遭受机械损伤时，与之相连的植株抗逆酶活性显著提升，形成群体防御响应。从生态互惠的角度来看，植物一旦接收到由菌根网络传递的信号，便能提前激活自身防御机制，极大地降低遭受病虫害侵袭的风险。同时，真菌通过协助植物完成信号传递这一过程，能够维系与植物之间的共生关系，借此保障稳定的碳源供应，进而维持整个共生体系的平衡。

防止恶意软件的最好方法是避免从未知网站下载和执行文件。在打开前一定要验证文件扩展名，并在执行前用最新的防病毒工具扫描所有下载的文件。

截止到现在，有关客户数量和受影响国家的详细信息尚未公开披露。

In this Help Net Security interview, Camellia Chan, CEO at X-PHY, discusses the dangers of deepfakes in real-world incidents, including their use in financial fraud and political disinformation. She explains AI-driven defense strategies and recommends updating incident response plans and internal policies, integrating detection tools, and ensuring compliance with regulations like the EU’s DORA to mitigate liability. How have attackers used deepfakes in real-world incidents, even if hypothetically, and how plausible are those tactics becoming? … More →

The post Deepfake attacks could cost you more than money appeared first on Help Net Security.

这是一本关于网络安全和国家行为的书籍，重点探讨了网络攻击在现代地缘政治竞争中的作用。文章讨论了网络间谍活动，特别强调了美国国家安全局 (NSA) 利用与电信公司和互联网公司的合作，以及利用网络漏洞进行大规模监控。此外，文本还分析了战略性网络攻击，包括著名的 Stuxnet 蠕虫病毒对伊朗核设施的破坏以及 Shamoon 恶意软件对沙特阿拉伯石油公司的攻击。最后，文中探讨了网络攻击如何被用于影响地缘政治事件，例如对美国选举的干扰和针对特定目标的胁迫行动，并指出这些行为已成为国家博弈中日益普遍且具有全球影响力的工具。 哎，欢迎收听。今天咱们深入聊你带来的这份材料——关于网络攻击和国家行为，主要参考了本·布坎南的《黑客与国家》。 ⸻ 材料里有个挺有意思的观点，跟以前大家想的那种“数字珍珠港”式大灾难不一样。他说，网络攻击现在更像是一种低烈度、一直存在的地缘政治游戏，是一种“新常态”。核心意思是：网络空间的对抗更多在于持续塑造环境（shaping），而不只是为了发个信号（signaling）或搞一次大破坏。里面包含了非常复杂的间谍、反间谍以及施加影响等活动。 ⸻ 有点像乔治·凯南在国际关系里说的：平时与战时一样，始终处在持续斗争的节奏。网络空间也符合这个道理。 ⸻ 材料里提到一个核心概念，叫美国的“主场优势”（Homefield Advantage）。它具体指什么？听起来像是美国在网络领域占了“地利”。没错，这个主场优势主要依靠两大支柱，都跟美国独特的地理位置和技术环境有关： 1. 与大型电信公司合作——像 AT&T、Verizon 等。在关键的国际通信枢纽（比如纽约那栋号称“坚不可摧”、没有窗户的 33 Thomas Street）部署监视设备，直接从经过美国的光纤里抓数据，流量非常大。 2. 通过法律程序——你可能听过的 PRISM 项目。它要求在美国运营的科技巨头（微软、谷歌、Facebook、苹果等）提供服务器上存储的外国情报目标通信数据，例如邮件、消息等。 物理拦截加上数据索取，这两手结合，让情报机构拿到的原始数据量和分析能力前所未有。当然，这一切都得偷偷进行，保密是关键。 ⸻ 除了自己监视，材料还提到一个更巧的办法，叫**“第四方收集”（Fourth Party Collection）**——它用电影《血色将至》里“我喝掉你的奶昔”的比喻，非常形象：情报机构发现另一个国家（可能是对手也可能是盟友）已经黑进了某个自己够不到的地方，就“搭顺风车”，利用对方打通的管道拿到想要却不易获取的情报。 • 材料写到，NSA 发现中国黑客入侵了印度驻北京大使馆的网络，于是跟在后面：一边观察中国黑客怎么干活、学习技术套路，一边顺手把印度外交的敏感文件也带回家。 • 他们也用类似方法监控韩国，看韩国如何搞朝鲜情报，弥补自身对朝情报的短板。 网络情报世界水很深，各种机会主义层次非常多，关键就是抓住机会。 ⸻ 说到更直接的网络攻击，材料也讨论了 Stuxnet 震网病毒。但更有意思的是，它指出：单纯用网络攻击来胁迫别人，效果有限。索尼影业被黑就是典型例子。 2014 年，索尼准备上映讽刺朝鲜领导人的电影《采访》（The Interview）。朝鲜强烈反应，黑客组织“和平卫士”发动大规模网络攻击，使用破坏性极强的 wiperware：直接清空索尼服务器和员工电脑里的大量数据，并泄露公司内部邮件、员工信息和高管薪酬。目标很明确——逼索尼撤片。 看上去这是网络胁迫的“完美案例”，但结果如何？一开始索尼确实取消了大规模上映；可后来美国政府介入、舆论压力增大，电影最终通过网络点播和一些独立影院上映，反而更火，成了现象级影片。可见，即便在最有利情况下，仅靠网络攻击要让大公司或一个国家彻底改变核心决定，仍然非常难。原因在于：网络攻击传递的信号往往模糊，威慑力远不如直接扔导弹或进行经济制裁来得直截了当、可靠。 ⸻ 总结这份材料的感觉：网络攻击的斗争不是电影里那种“按个按钮世界就瘫痪”的场景，而是一场永无止境、暗地较劲的博弈。各国利用技术优势搞渗透、情报、反制，偶尔也出手一下，但效果和意图往往复杂难辨。 ⸻ 这就引出一个值得持续思考的问题：当利用技术漏洞（比如给加密算法留后门，或搞隐蔽渗透与监听）成为地缘政治的日常操作，而且这种能力还在扩散，它会怎样侵蚀我们对技术的基础信任？这些看不见、摸不着的持续对抗，又在如何悄悄塑造未来的国际关系格局？这可能是你需要持续关注的。

Хакеры даже не взламывали систему — они просто нашли слабое звено.