Aggregator

2025年07月21日-2025年07月27日本周漏洞态势研判情况本周信息安全漏洞威胁整体评价级别为中。国家

Кто бы знал, что один README.md может превратить ИИ-помощника в инструмент слива данных.

基于全球2689个中间件漏洞数据，揭示传统NVD CPE分类粗放、错误率高、更新滞后等痛点。摄星玄猫创新动态资产库与智能分类方案，实现漏洞精准管理，并警示国产中间件风险需重视。

曾几何时，安全运营（SecOps）是一项可控的工作；如今，它却成了复杂性与混乱交锋的战场。

Booz Allen Hamilton announced Vellox Reverser, an AI-enabled cloud product that protects organizations from malware as cyberattacks grow increasingly insidious. The service uses a network of peer-to-peer nodes that collaboratively deconstruct complex malware binaries and produce actionable defensive recommendations in minutes instead of days or weeks. Advanced persistent threats and malicious actors increasingly use AI and other sophisticated tools to create tailored malware variants that evade detection. When static and dynamic analysis falls short, teams … More →

The post Booz Allen Hamilton launches Vellox Reverser to accelerate AI-powered malware analysis appeared first on Help Net Security.

美国网络司令部强化攻击性网络武器和武器测试环境研发

亲乌黑客组织声称已深度侵入俄航网络

Seychelles Commercial Bank on Friday said it had recently identified and contained a cybersecurity incident. A hacker claims to have stolen and sold the personal data of clients of Seychelles Commercial Bank. The bank, which provides personal and corporate services on Seychelles, one of the world’s smallest countries, notified customers of a hack, but said […]

Минцифры  разработало проект требований к применению абонентских терминалов пропуска трафика.

详细分析mikrotik cve复现过程

根据发表在《Nature Medicine》期刊上的一项研究，教育并不能延缓认知衰退。对 170,795 名 50 岁以上参与者的 407,356 份情景记忆评分和 6,472 人的 15,157 次脑部磁共振成像(MRI)扫描数据分析发现，教育程度与更好的记忆功能、更大的颅内体积相关，但并不能阻挡岁月对大脑的侵蚀。无论学历高低，大脑都会以相似的节奏慢慢萎缩，认知能力也会同步下滑。教育给了你一个更好的起跑线，但并不能改变衰老这场马拉松的节奏。虽然读书不能让你永葆青春，但至少能让你在变老的路上保持更清晰的头脑。

致力于第一时间为企业级用户提供权威漏洞情报和有效解决方案。

Попытка сохранить деньги стоила пенсионерке состояния.

深圳大疆的无人机产品在美国海关面临非正式的禁令。为规避禁令，大疆被发现通过更换品牌名称出售旗下产品。亚马逊上一款售价 750 美元的 SkyRover X1 无人机被发现就是大疆的 Mini 4 Pro。SkyRover X1 与 Mini 4 Pro 有着完全相同的规格和功能，能直接连接大疆的网络基础设施如 DJIGlobal、DJISupport 和 DJIEnterprise。黑客 Kevin Finisterre 使用大疆的凭证成功登陆了 SkyRover 的系统。安全研究员 Jon Sawyer 发现 SkyRover 的应用使用与大疆软件相同的加密密钥。

A vulnerability, which was classified as problematic, was found in YouTube Embed Plugin up to 10.3 on WordPress. Affected is an unknown function. The manipulation of the argument Instance leads to cross site scripting. This vulnerability is traded as CVE-2025-6692. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability, which was classified as problematic, has been found in Universal Video Player Plugin up to 3.2.1 on WordPress. This issue affects some unknown processing. The manipulation leads to cross site scripting. The identification of this vulnerability is CVE-2025-53559. The attack may be initiated remotely. There is no exploit available.

A vulnerability classified as problematic was found in CM Map Locations Plugin up to 2.1.6 on WordPress. This vulnerability affects unknown code. The manipulation leads to cross site scripting. This vulnerability was named CVE-2025-48151. The attack can be initiated remotely. There is no exploit available.

A vulnerability classified as problematic has been found in Magical Addons for Elementor Plugin up to 1.3.8 on WordPress. This affects an unknown part of the component Custom Attributes Handler. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2025-8196. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability was found in Fan Page Plugin up to 1.0.1 on WordPress. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation of the argument width leads to cross site scripting. This vulnerability is handled as CVE-2025-6681. The attack may be launched remotely. There is no exploit available.