Aggregator

A vulnerability was found in Oracle MySQL Enterprise Monitor 8.0.36 and prior. It has been declared as very critical. Affected by this vulnerability is an unknown functionality of the component Monitoring. The manipulation leads to files or directories accessible. This vulnerability is known as CVE-2023-50164. The attack can be launched remotely. There is no exploit available.

Sandworm在乌克兰部署恶意 Windows 激活程序；Cozy Bear从公司Office 365 电子邮件环境中窃取了惠普员工数据；与 Lazarus Group 活动相关的信息窃取恶意软件

Sandworm在乌克兰部署恶意 Windows 激活程序；Cozy Bear从公司Office 365 电子邮件环境中窃取了惠普员工数据；与 Lazarus Group 活动相关的信息窃取恶意软件

Russian, Iranian and Chinese APTs Among Most Active Ransomware Collaborators
Security researchers are increasingly finding it challenging to attribute cyberattacks due to surging cooperation between nation-state hackers and ransomware groups, especially for espionage purposes. They say it reflects the blurring of the lines between state-directed and criminal activities.

Cuts Hit Duplicative Roles, Positions Rooted in Secureworks Being a Public Company
Sophos laid off 6% of its staff just days after closing its $859 million acquisition of Secureworks. The job cuts will streamline duplicative roles following the Feb. 3 close of the Secureworks deal as well as reduce positions that are no longer needed since Secureworks delisted as a public company.

Could CISA's Uncertain Future Embolden Nation-State Attackers?
As the future of the Cybersecurity and Infrastructure Security Agency becomes increasingly uncertain in the wake of a massive federal overhaul, experts warn that key U.S. infrastructure sectors, including energy, financial services and election infrastructure, are at a heightened risk of cyberattacks and cyberespionage.

Astaroth Kit Offered for $2,000 on Telegram, Intercepts Authentication in Real Time
A new phishing kit called Astaroth bypasses two-factor authentication through session hijacking and real-time credential interception from services like Gmail, Yahoo, AOL and Microsoft 365. Acting as a man-in-the-middle, it captures login credentials, tokens and session cookies in real time.

在制裁之前，美国国务院为LockBit勒索软件管理员提供了高达1000万美元的奖励，并为LockBit勒索软件所有者、运营商、管理员和附属机构提供了高达1500万美元的奖励。

保护边缘设备免受强制攻击的步骤包括将默认管理密码更改为强大且唯一的密码，实施多因素身份验证（MFA），使用受信任ip的允许列表，以及禁用不需要的web管理界面。

Как инженеры MWS обеспечивают DevSecOps-гигиену в GitLab CI/CD.

BBC 研究发现，AI 新闻摘要工具会经常生成不准确或误导性的摘要。生成式 AI 生成内容并非是基于事实而是基于统计概率，最新研究只是再次确认了这一点。研究使用了 OpenAI 的 ChatGPT、微软的 Copilot、Google 的 Gemini，以及 Perplexity 公司的 AI 助手。结果显示，51% 的 AI 答案存在严重问题; 19% 的 AI 新闻引用存在事实错误；13% 的 AI 引文要么改变了原文要么根本不存在。Google Gemini 表现最差，34% 的回答存在严重问题，相比下 Copilot 是 27%，Perplexity 是 17%，ChatGPT 是 15%。BBC News and Current Affairs CEO Deborah Turness 对 AI 工具可能进一步扭曲事实表达了担忧，认为开发生成式 AI 工具的公司在玩火，“我们生活在一个问题丛生的年代。需要等多久 AI 扭曲的新闻头条会对现实世界造成重大伤害？”

Телекоммуникационные сети и образовательные учреждения стали главными целями преступников.

欢迎投递简历！

欢迎投递简历！

A newly discovered vulnerability in WinZip, a popular file compression and archiving utility, has raised alarms among cybersecurity experts. Identified as CVE-2025-1240, this critical flaw allows remote attackers to execute arbitrary code on a victim’s system under specific conditions. Users are strongly advised to update their software to mitigate the risk. Key Details of the […]

The post WinZip Vulnerability Allows Remote Attackers to Execute Arbitrary Code appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.