Aggregator

我国能源领域网络安全不仅关乎国计民生与社会稳定，更关系国家主权与安全。当前，随着我国数字经济与能源产业深度融合，能源行业正大力推进数字化转型、智能化发展，秉持“以安全保发展，以发展促安全”，网络安全成为数智化重要组成部分。

智商，是AI的门槛；而情商，是 AI 产品的「隐形」护城河。

企业OT端口暴露量激增35%，敏感文档泄露警报跃升超10%，物联网设备将达312亿台。

Пара секунд после загрузки, и весь домен уже под контролем посторонних.

一起探索安卓逆向的奥秘

GPT-5遭回声室与叙事攻击破解

8月15日中午12点 准时开赛

看雪论坛作者ID：青衫不负雪

上周关注度较高的产品安全漏洞(20250804-20250810)

国家信息安全漏洞共享平台（以下简称CNVD）本周共收集、整理信息安全漏洞375个，其中高危漏洞198个、中危漏洞151个、低危漏洞26个。

ESET researchers have discovered a previously unknown vulnerability in WinRAR, exploited in the wild by Russia-aligned group RomCom. If you use WinRAR or related components such as the Windows versions of its command line tools, UnRAR.dll, or the portable UnRAR source code, update right away to the latest release. According to ESET telemetry, malicious archives were used in spearphishing campaigns between July 18 to July 21, 2025, targeting financial, manufacturing, defense, and logistics companies in … More →

The post WinRAR zero-day exploited by RomCom hackers in targeted attacks appeared first on Help Net Security.

A vulnerability was found in 2100 Technology Official Document Management System 5.0.89.0/5.0.89.1/5.0.89.2. It has been rated as critical. Affected by this issue is some unknown functionality. The manipulation leads to authentication bypass by spoofing. This vulnerability is handled as CVE-2025-8853. The attack may be launched remotely. There is no exploit available.

A vulnerability was found in code-projects eBlog Site 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /native/admin/save-slider.php of the component File Upload Module. The manipulation leads to unrestricted upload. This vulnerability is known as CVE-2025-8859. The attack can be launched remotely. Furthermore, there is an exploit available.

Submit #628112 / VDB-319399

Over 29,000 Exchange servers exposed online remain unpatched against a high-severity vulnerability that can let attackers move laterally in Microsoft cloud environments, potentially leading to complete domain compromise. [...]

声明：文章中涉及的程序(方法)可能带有攻击性，仅供安全研究与教学之用，读者将其信息做其他用途，由用户承担全部

2025年8月11日，深瞳漏洞实验室监测到一则WinRAR组件存在目录遍历漏洞的信息，漏洞编号：CVE-2025-8088，漏洞威胁等级：高危。

美国防部AIxCC决赛提晓最佳漏洞识别和修复AI模型

平均每人可领取约35.5万元