Aggregator

ThreatBook ATI是一款全球高级威胁情报解决方案，专注于亚太地区网络安全威胁检测与响应。每天分析140亿次攻击记录，提供高精度情报和本地化视角，助力组织提升安全能力。

Singapore, Singapore, 29th September 2025, CyberNewsWire

The post ThreatBook Launches Best-of-Breed Advanced Threat Intelligence Solution appeared first on Security Boulevard.

快速浏览！2025.9.22—9.28安全动态回顾。

FileFix是ClickFix攻击家族的新变种，这类攻击均通过社会工程学手段，欺骗用户将恶意命令粘贴到操作系统对话框中，谎称这些命令是解决问题的“修复方案”。

キヤノン製のプロダクション/オフィス/スモールオフィス向け複合機およびレーザービームプリンターの一部のプリンタドライバには、複数の脆弱性が存在します。

当前环境异常，需完成验证后才能继续访问。

当前环境异常需完成验证后方可继续访问。点击去验证按钮进行操作。

浏览器不支持音频元素导致无法播放音频内容,提示信息由SpeedVoice呈现。

A vulnerability was found in ABB Terra AC Wallbox up to 1.8.33. It has been rated as critical. Impacted is an unknown function. This manipulation causes heap-based buffer overflow. This vulnerability is handled as CVE-2025-10504. It is possible to launch the attack on the local host. There is not any exploit available.

A vulnerability was found in Canon Generic Plus PCL6 Printer Driver, Generic Plus UFR II Printer Driver, Generic Plus LIPS4 Printer Driver, Generic Plus LIPSLX Printer Driver and Generic Plus PS Printer Driver. It has been declared as problematic. This issue affects some unknown processing. The manipulation results in incorrect behavior order. This vulnerability is known as CVE-2025-9904. It is possible to launch the attack remotely. No exploit is available.

A vulnerability was found in Canon Generic Plus PCL6 Printer Driver, Generic Plus UFR II Printer Driver, Generic Plus LIPS4 Printer Driver, Generic Plus LIPSLX Printer Driver and Generic Plus PS Printer Driver. It has been classified as critical. This vulnerability affects unknown code. The manipulation leads to out-of-bounds write. This vulnerability is traded as CVE-2025-9903. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability was found in Canon Generic Plus PCL6 Printer Driver, Generic Plus UFR II Printer Driver, Generic Plus LIPS4 Printer Driver, Generic Plus LIPSLX Printer Driver and Generic Plus PS Printer Driver and classified as problematic. This affects an unknown part. Executing manipulation can lead to out-of-bounds read. This vulnerability appears as CVE-2025-7698. The attack may be performed from remote. There is no available exploit.

Google以安全为由要求验证所有Android开发者身份，并屏蔽未经验证开发者的应用侧载。第三方应用商店F-Droid反对此政策，认为其将终结开放生态系统，并呼吁用户捍卫应用自由分发。

上个月 Google 以安全的名义宣布将验证所有 Android 应用开发者的身份，从明年开始，Google 将屏蔽未经身份验证的开发者的 Android 应用的侧载（sideload）。开源自由软件 Android 应用商店 F-Droid 发表声明反对 Google 的决定。F-Droid 认为，如果这一政策强制推行，包括它在内的第三方应用商店将面临终结。Google 声称是为了安全，但过去几年它的官方应用商店 Google Play 被发现托管了大量恶意程序。它要求验证应用开发者的身份不是为了安全而是为了巩固权力，加强对曾经开放的生态系统的控制。Google 正在构建一个限制竞争和用户自由的阻塞点（choke point）。F-Droid 呼吁对此问题关心的用户向自己所在地区的议员递交反对意见，向欧盟 DMA 请愿，捍卫应用的自由分发。

Киберагентства сразу четырёх стран, не сговариваясь, забили тревогу. Времени почти не осталось.

Firezone is an open-source platform that helps organizations of any size manage secure remote access. Unlike most VPNs, it uses a least-privileged model, giving users only the access they need. Firezone was built to scale from the start, so you can add more gateways as traffic grows. It uses WireGuard, a fast and secure VPN protocol, and adds extra protections like short-lived encryption keys and firewall hole-punching to reduce the attack surface. It is also … More →

The post Firezone: Open-source platform to securely manage remote access appeared first on Help Net Security.

A newly discovered DLL hijacking vulnerability in Notepad++, the popular source code editor, could allow attackers to execute arbitrary code on a victim’s machine. Tracked as CVE-2025-56383, the flaw exists in version 8.8.3 and potentially affects all installed versions of the software, putting millions of users at risk. The vulnerability enables a local attacker to […]

The post Notepad++ DLL Hijacking Vulnerability Let Attackers Execute Malicious Code appeared first on Cyber Security News.

Dutch police arrested two 17-year-olds for spying for pro-Russian hackers; one jailed, the other placed on home bail. Dutch police arrested two 17-year-olds suspected of spying for pro-Russian hackers. One of the suspects remains in custody, while the other is released on home bail. According the NL times, the arrests followed a tip from Dutch […]

荷兰警方逮捕两名17岁青少年，涉嫌为亲俄黑客在欧盟机构附近从事间谍活动。两人通过Telegram被招募，使用Wi-Fi嗅探器收集数据。一名被捕，另一名获保释。