Nitrogen
You must login to view this content
Aggregator
Everest
4 months 4 weeks ago
You must login to view this content
cohenido
Researchers Exploit Cursor Background Agents to Take Over Amazon EC2 Instance
4 months 4 weeks ago
Security researchers have successfully exploited vulnerabilities in Cursor’s Background Agents to gain unauthorized access to an Amazon EC2 instance, demonstrating critical risks associated with SaaS applications that integrate deeply with cloud infrastructure. The researchers immediately disclosed their findings to Cursor’s security team, who confirmed that safeguards were in place to prevent misuse. Initial Discovery and […]
The post Researchers Exploit Cursor Background Agents to Take Over Amazon EC2 Instance appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
Divya
Storm-2603 Exploits SharePoint Flaws to Deploy Warlock Ransomware on Unpatched Systems
4 months 4 weeks ago
Microsoft has revealed that one of the threat actors behind the active exploitation of SharePoint flaws is deploying Warlock ransomware on targeted systems.
The tech giant, in an update shared Wednesday, said the findings are based on an "expanded analysis and threat intelligence from our continued monitoring of exploitation activity by Storm-2603."
The threat actor attributed to the financially
The Hacker News
Storm-2603 Exploits SharePoint Flaws to Deploy Warlock Ransomware on Unpatched Systems
4 months 4 weeks ago
微软披露一中国关联威胁行为者正利用SharePoint漏洞部署Warlock勒索软件。该行为者通过 CVE-2025-49706 和 CVE-2025-49704 漏洞，在未修补服务器上植入 spinstall0.aspx 木马以获取初始访问权限，并通过 cmd.exe 和批处理脚本深入网络。微软建议用户升级至支持版本、应用最新补丁并启用安全功能以应对已影响至少 400 名用户的攻击。
Against the Censorship of Adult Content By Payment Processors
4 months 4 weeks ago
这篇文章讨论了支付处理器被用作审查工具的问题，指出其对网络自由表达构成威胁。作者回顾了历史案例，并分析了Collective Shout等组织如何利用支付压力审查内容。文章强调这是一个政治问题，并呼吁采取法律和集体行动来应对审查威胁。
Искала подработку, а нашла статью: первый случай "дропперства" в Москве
4 months 4 weeks ago
Как желание подзаработать обернулось делом
National Nuclear Security Administration Systems Breached in SharePoint Cyberattack
4 months 4 weeks ago
National Nuclear Security Administration and National Institutes of Health targeted in global Microsoft SharePoint vulnerability exploitation. Chinese hacking groups suspected in widespread data breaches.
Deeba Ahmed
The “S” in Vibe Coding Stands for Security
4 months 4 weeks ago
Vibe coding is here. And it’s not just a fad — it’s reshaping how we build, deploy and even conceive of software. But unless we hit the brakes and bake in security now, we’re setting ourselves up for another generation of vulnerabilities, exploits and blame games.
The post The “S” in Vibe Coding Stands for Security appeared first on Security Boulevard.
Alan Shimel
The “S” in Vibe Coding Stands for Security
4 months 4 weeks ago
文章讨论了AI驱动的“Vibe Coding”工具在生产环境中的安全隐患，并通过多个案例展示了其潜在风险。作者建议从设计阶段就将安全性融入工具，并强调透明日志和持续测试的重要性。尽管这些措施能提升安全性，但AI工具的安全性仍需进一步关注和改进。
【资讯】7.23-24全球动态
4 months 4 weeks ago
以下是2025年7月23日0:00至2025年7月24日18:00全球主流媒体信息的分类整理，并已去除重复信息，按发布时间顺序排列。
【情报】炮制《台湾冲突遏制法案》的美国政客
4 months 4 weeks ago
《台湾冲突遏制法案》由美国众议院议员丽莎·麦克莱恩（Lisa McClain）和布拉德·谢尔曼（Brad Sherman），于2025年2月27日提交提交众议院金融服务委员会和外交事务委员会审议。
GitLab Security Update – Patch for Multiple Vulnerabilities in Community and Enterprise Edition
4 months 4 weeks ago
GitLab has released critical security patches addressing multiple vulnerabilities across its Community Edition (CE) and Enterprise Edition (EE) platforms, with versions 18.2.1, 18.1.3, and 18.0.5 now available for immediate deployment. The release includes fixes for six distinct security vulnerabilities, including two high-severity cross-site scripting (XSS) issues that pose significant risks to Kubernetes proxy functionality. Key […]
The post GitLab Security Update – Patch for Multiple Vulnerabilities in Community and Enterprise Edition appeared first on Cyber Security News.
Kaaviya
硅谷 AI 创业公司拥抱中国的 996 工作制
4 months 4 weeks ago
连线报道，硅谷 AI 创业公司正在拥抱中国引发争议的 996 工作制。所谓 996 指的是从早上 9 点工作到晚上 9点，每周 6 天，一周工作 72 小时，近两倍于标准的 8 小时工作制(每周五天共 40 小时)。996 工作制引发了现代奴隶制的批评，但 AI 创业公司为了彼此之间展开竞争以及为了与中国公司竞争，纷纷拥抱 996。经营着一家人力资源和招聘公司的 Adrian Kinnersley 对这一现象如此普遍表示惊讶，他说有好几个客户在面试前筛选应聘者的前提条件之一就是他们是否愿意接受 996 工作制。AI 创业公司 Rilla 称该公司 80 名员工几乎所有人都遵守 996 工作制。它的招聘广告明确指出每周工作时间需超过 70 小时，如果对工作时间安排不满意就不要来应聘。该公司提供早餐、午餐和晚餐，周六也不例外。AI 物流创业公司 Sotira CEO Amrita Bhasin 认为对公司高层来说，996 工作制基本上是强制性的，但强加于普通员工是不公平的。
Mark Wielaard: classpath.org domain is back!
4 months 4 weeks ago
classpath.org域名过期后已续费五年，确保子域名如planet、devel和icedtea恢复正常。
报告 | Darka5恶意家族样本分析
4 months 4 weeks ago
本报告将详细剖析darka5恶意家族样本的关键特征，涵盖其攻击向量、下载器行为、数据加密差异、通信流量混淆以及特殊的隐蔽手段，旨在为网络安全专家和防御者提供深入的见解，以更好地理解和应对这一新兴安全威胁。
观点 | 为公共摄像头划定法治边界
4 months 4 weeks ago
摄像头随处可见，它们就像守护公众安全的“卫士”，对维护社会秩序、有效预防犯罪发挥着重要作用。然而，这一技术应用所带来的数据滥用、信息泄露等问题也引发了公众对隐私泄露的隐忧。对此，我们既要善用技术筑牢安全防线，又要依靠法治守护公民尊严。
沈春耀：贯彻总体国家安全观 加强国家安全法律制度体系建设
4 months 4 weeks ago
国家安全是国家生存和发展的基本前提和重要保障，是民族复兴和中国式现代化行稳致远的根基。我们党诞生于民族危亡之时，对于国家安全的重要性有着刻骨铭心的认识。
专题·原创 | 走深走实十周年：全民国家安全教育回顾与展望
4 months 4 weeks ago
面向未来，全民国家安全教育将以提升领导干部安全能力、增强全民国家安全意识与素养为目标，分阶段、分群体稳步推进。通过加强理论阐释、深化学科建设、创新教育形式及扩大教育覆盖面等路径，致力于形成全社会维护国家安全的思想共识与行动自觉……
Sonicwall fixes critical flaw in SMA appliances, urges customers to check for compromise (CVE-2025-40599)
4 months 4 weeks ago
Sonicwall is asking customers running specific Secure Mobile Access (SMA) 100 Series devices to patch a newly uncovered vulnerability (CVE-2025-40599) as soon as possible. “While there is currently no evidence that this vulnerability is being actively exploited in the wild,” Sonicwall is advising organizations using SMA 210, 410 or 500v appliances to check whether they have been compromised in a recently disclosed ongoing campaign delivering the OVERSTEP backdoor to end-of-life SMA devices. The attack campaign, … More →
The post Sonicwall fixes critical flaw in SMA appliances, urges customers to check for compromise (CVE-2025-40599) appeared first on Help Net Security.
Zeljka Zorz