Aggregator

今年早些时候，海牙国际刑事法院以战争罪对以色列总理内塔尼亚胡及其前国防部长加兰特（Yoav Gallant）发出逮捕令，美国总统特朗普随后对国际刑事法院进行了制裁，微软则立即封了首席检察官 Karim Khan 的电邮账号。但很多时候，美国科技巨头对制裁名单的响应并不像微软动作那么快。5 月 29 日，美国财政部对 Funnull Technology Inc.及其经营者、40 岁的上海人刘理志 aka Liu“Steve”Lizhi、XXL4 和 Nice Lizhi 等进行经济制裁，云服务商 Funnull 被控帮助了金融诈骗导致美国人损失逾 2 亿美元。根据美国法律，美国公司被禁止与被制裁的个人继续做生意。调查发现，在一个多月后，美国科技巨头 Facebook、Github、PayPal 和 Twitter/X 仍然没有关闭刘理志的账号。LinkedIn 的账号是在被要求置评后几小时内删除的。

То, что вы вытирали со стола, теперь может спасать жизни.

今日暂未更新资讯~
更多最新文章，请访问SecWiki

Multiple vulnerabilities that remain unpatched in Ruckus Wireless management products could be exploited to fully compromise the network environment they serve. [...]

Onions Changelog

The security startup provides managed detection and response services for small to midsize businesses to detect and address modern threats, such as ransomware, phishing attacks, and malicious insiders.

Зачем афиша, если есть торренты? Кинотеатры снова проигрывают.

Reflectiz, a leading cybersecurity company specializing in web exposure management, today announced a new integration with Datadog, Inc. (NASDAQ: DDOG), the monitoring and security platform for cloud applications. This integration combines advanced website security intelligence with enterprise-grade observability, empowering organizations with continuous visibility and control over their expanding attack surface. The partnership introduces the Reflectiz Security Integration within […]

The post Reflectiz Now Available on the Datadog Marketplace appeared first on Cyber Security News.

Ingram Micro has begun restoring systems and business services after suffering a massive SafePay ransomware attack right before the July 4th holiday. [...]

An impostor who posed as the secretary of state in text and voice communications with diplomats and politicians demonstrates the increased sophistication of and national security threat posed by the AI technology.

A vulnerability was found in Gwolle Guestbook Plugin up to 4.9.2 on WordPress. It has been rated as problematic. This issue affects some unknown processing. The manipulation of the argument gwolle_gb_content leads to cross site scripting. The identification of this vulnerability is CVE-2025-5807. The attack may be initiated remotely. There is no exploit available.

A vulnerability was found in wpForo Forum Plugin up to 2.4.5 on WordPress. It has been declared as problematic. This vulnerability affects unknown code of the component SVG File Handler. The manipulation leads to cross site scripting. This vulnerability was named CVE-2025-4406. The attack can be initiated remotely. There is no exploit available.

A vulnerability was found in ConnectWise PSA. It has been classified as problematic. This affects an unknown part of the component API Request Handler. The manipulation leads to insertion of sensitive information into sent data. This vulnerability is uniquely identified as CVE-2025-7204. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in RSSNext Folo and classified as critical. Affected by this issue is the function pull_request_target of the file github/workflows/auto-fix-lint-format-commit.yml. The manipulation leads to inclusion of functionality from untrusted control sphere. This vulnerability is handled as CVE-2025-53546. The attack may be launched remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

Reflectiz, a leading cybersecurity company specializing in web exposure management, today announced a new integration with Datadog, Inc. (NASDAQ: DDOG), the monitoring and security platform for cloud applications. This integration combines advanced website security intelligence with enterprise-grade observability, empowering organizations with continuous visibility and control over their expanding attack surface. The partnership introduces the Reflectiz […]

The post Reflectiz Joins the Datadog Marketplace appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A vulnerability has been found in mcp-remote up to 0.1.15 and classified as critical. Affected by this vulnerability is the function authorization_endpoint. The manipulation leads to os command injection. This vulnerability is known as CVE-2025-6514. The attack can be launched remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability, which was classified as problematic, was found in IBM OpenPages with Watson 8.3/9.0. Affected is an unknown function. The manipulation leads to improper ownership management. This vulnerability is traded as CVE-2025-1112. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Tenda CP3 Pro 22.5.4.93. This issue affects some unknown processing of the file /etc/init.d/eth.sh of the component Telnet Service. The manipulation leads to weak password requirements. The identification of this vulnerability is CVE-2025-52364. The attack may be initiated remotely. There is no exploit available. It is recommended to apply restrictive firewalling.

DGSE intelligence head Nicolas Lerner said Moscow’s tactics are evolving and increasingly include on-the-ground activities carried out by paid operatives.