Aggregator

对于英国政府要求在其云存储服务 iCloud 中创建后门的命令，苹果正向法庭提起挑战。金融时报报道，苹果向调查权力法庭（Investigatory Powers Tribunal）提起上诉，寻求推翻英国政府的命令。这是 2016 年法律 Investigatory Powers Act 允许当局破解加密的条款首次在法庭上面临考验。调查权力法庭将斟酌政府的命令是否合法，如果不合法，可能会下令撤销。本案可能最早于本月开庭审理，但暂时不清楚是否会公开审理。政府可能会以国家安全为由要求不公开。

Deze zomer gaat de tiende editie van de Summerschool van start! Van 28 juli tot en met 8 augustus krijgen deelnemers de kans om een blik te werpen op het werk dat de Joint Sigint Cyber Unit (JSCU) van de AIVD en de Militaire Inlichtingen- en Veiligheidsdienst (MIVD) doet. In twee weken tijd leren deelnemers alles malware, forensics, blue-teaming en red-teaming, en van hunting tot hacking.

Руководителям NSO Group предъявлены обвинения в шпионаже.

Фишинговые атаки становятся всё быстрее, а цифровые активы – всё дороже.

New SANS Institute research finds that 50% of global organizations were hit by an OT security incident in the past year

经常在渗透过程中，遇到一些要手动尝试的payload，比较麻烦，于是想学习一下burp插件的开发。

A high-severity security flaw in the widely used Vim text editor allows attackers to execute arbitrary code on vulnerable systems by tricking users into opening specially crafted TAR archives. Tracked as CVE-2025-27423, this vulnerability has prompted urgent patching efforts and warnings for developers and system administrators globally. Technical Breakdown of the Vulnerability The flaw resides in […]

The post Vim Vulnerability (CVE-2025-27423) Allows Code Execution via Malicious TAR Archives appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

打造大模型安全的中国范式

A critical evolution of the CVE-2024-7014 vulnerability, originally patched in July 2024, has resurfaced with updated tactics to bypass security measures.  Dubbed Evilloader, this new exploit leverages Telegram’s multimedia handling mechanisms to execute malicious JavaScript code by disguising .htm files as video content.  The attack chain, observed in active campaigns, demonstrates how threat actors continue […]

The post Telegram EvilVideo Vulnerability Exploited to Execute Malicious Code on Victim Device appeared first on Cyber Security News.

新闻速览 •工信部CSTIS提醒：防范Murdoc_Botnet僵尸网络的风险 •波兰航天局遭遇网络攻击后，系 […]

可导致未认证攻击者远程访问凭据

速修复

更多活动赛事信息，请关注安全419

更多活动赛事信息，请关注安全419

Zero trust architecture design principles 1.0 launched.

历时半年，填补长尾知识评估空白

A newly documented exploitation technique targeting Telegram’s file-sharing infrastructure has raised alarms in cybersecurity circles. Dubbed “EvilVideo,” this attack vector leverages a vulnerability (CVE-2024-7014) in how Telegram processes multimedia content, enabling attackers to disguise malicious HTML files as video files. When unsuspecting users attempt to open these files, embedded JavaScript code executes, enabling IP logging, […]

The post Telegram EvilVideo Vulnerability Exploited to Run Malicious Code on Victims’ Devices appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.