Aggregator

背景 2025年被称为 Agent 元年，AI 的发展逐渐来到了新的临界点，Agent 凭借其独特的自主理解、 […]

In a significant security move, Microsoft announced on August 26, 2025, that it will require mandatory multifactor authentication (MFA) for all accounts signing in to the Azure portal and related administrative centers. The policy, first introduced in 2024, aims to dramatically reduce account compromise by enforcing an additional layer of identity verification across Azure and […]

The post Microsoft Enforces MFA for Logging into Azure Portal appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

macOS has long been recognized for its robust, integrated security stack, but cybercriminals are finding ways to weaponize these very defenses.  Recent incidents show attackers exploit Keychain, SIP, TCC, Gatekeeper, File Quarantine, XProtect, and XProtect Remediator to stealthily deliver malicious payloads.  Key Takeaways1. Abuse of macOS tools (Keychain, SIP, File Quarantine) for credential theft and […]

The post Hackers Leverage Built-in MacOS Protection Features to Deploy Malware appeared first on Cyber Security News.

Currently trending CVE - Hype Score: 15 - An insufficient validation on the server connection endpoint in Netskope Client allows local users to elevate privileges on the system. The insufficient validation allows Netskope Client to connect to any other server with Public Signed CA TLS certificates and send specially ...

Currently trending CVE - Hype Score: 7 - The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Fancy Text widget in all versions up to, and including, 6.0.3 due to insufficient input ...

A vulnerability identified as problematic has been detected in Akınsoft QR Menü up to 1.05.11. This affects an unknown function. The manipulation leads to cross-site request forgery. This vulnerability is documented as CVE-2025-0610. The attack can be initiated remotely. There is not any exploit available. You should upgrade the affected component.

A vulnerability categorized as problematic has been discovered in Akinsoft QR Menu up to 1.05.11. The impacted element is an unknown function. Executing manipulation can lead to improper restriction of excessive authentication attempts. This vulnerability is registered as CVE-2025-2412. It is possible to launch the attack remotely. No exploit is available. It is advisable to upgrade the affected component.

A vulnerability was found in Akınsoft QR Menü up to 1.05.11. It has been rated as critical. The affected element is an unknown function of the component HTTP Response Handler. Performing manipulation results in certificate with host mismatch. This vulnerability is cataloged as CVE-2024-12925. It is possible to initiate the attack remotely. There is no exploit available. Upgrading the affected component is advised.

TradingView оказался бесплатным билетом в ваш смартфон.

反编译器的好与坏~

Apple appears poised to remove the physical SIM card slot from its upcoming iPhone 17 models in more countries, with a significant rollout anticipated across the European Union. This change would mark the latest step in Apple’s long-term strategy of transitioning to the more secure and flexible eSIM technology, a move already implemented in the […]

The post Apple May Drop Physical SIM Card in iPhone 17 appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A vulnerability was found in Akınsoft QR Menü up to 1.05.11. It has been declared as problematic. Impacted is an unknown function. Such manipulation leads to cross site scripting. This vulnerability is listed as CVE-2024-12914. The attack may be performed from remote. There is no available exploit. It is recommended to upgrade the affected component.

Cybersecurity today is less about single attacks and more about chains of small weaknesses that connect into big risks. One overlooked update, one misused account, or one hidden tool in the wrong hands can be enough to open the door. The news this week shows how attackers are mixing methods—combining stolen access, unpatched software, and clever tricks to move from small entry points to large

A vulnerability was found in Akınsoft QR Menü up to 1.05.11. It has been classified as problematic. This issue affects some unknown processing. This manipulation causes open redirect. This vulnerability is tracked as CVE-2024-12924. The attack is possible to be carried out remotely. No exploit exists. Upgrading the affected component is recommended.

A vulnerability was found in RemoteClinic 2.0 and classified as critical. This vulnerability affects unknown code of the file /staff/profile.php. The manipulation of the argument ID results in sql injection. This vulnerability is identified as CVE-2025-9802. The attack can be executed remotely. There is not any exploit available.

Submit #641133 / VDB-322117

A vulnerability has been found in SimStudioAI sim up to ed9b9ad83f1a7c61f4392787fb51837d34eeb0af and classified as critical. This affects an unknown part. The manipulation of the argument filePath leads to path traversal. This vulnerability is referenced as CVE-2025-9801. Remote exploitation of the attack is possible. Furthermore, an exploit is available. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. To fix this issue, it is recommended to deploy a patch.

A vulnerability, which was classified as critical, was found in SimStudioAI sim up to ed9b9ad83f1a7c61f4392787fb51837d34eeb0af. Affected by this issue is the function Import of the file apps/sim/app/api/files/upload/route.ts of the component HTML File Parser. Executing manipulation of the argument File can lead to unrestricted upload. The identification of this vulnerability is CVE-2025-9800. The attack may be launched remotely. Furthermore, there is an exploit available. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. A patch should be applied to remediate this issue.

Сотни тысяч попыток, десятки адресов, один ритм: брутфорс как сервис нового поколения.

Submit #641130 / VDB-322116