Aggregator

这篇文章介绍了ClickFix技术作为一种社会工程学手段被用于网络攻击的情况。通过伪装成快速修复计算机问题的步骤，攻击者诱导用户执行恶意命令或下载恶意软件。文中分析了三种主要的ClickFix攻击活动：NetSupport远程访问木马（RAT）、Latrodectus恶意软件和Lumma Stealer窃取器，并详细描述了它们的传播方式和技术细节。此外，文章还提供了检测和防御ClickFix攻击的方法，并强调了提升员工安全意识的重要性。

According to a report by Morphisec, the Iranian threat group Pay2Key.I2P has intensified its operations amid escalating tensions in the Middle East. The group is now offering larger payouts to hacker affiliates who participate...

The post Iranian Ransomware Group Pay2Key.I2P Escalates Attacks on US & Israel appeared first on Penetration Testing Tools.

一位用户尝试通过Kali和Burp Suite对Instagram iOS应用进行离线暴力破解OTP的挑战。由于仅限于自己的设备发起会话请求，用户计划模拟请求并拦截后尝试本地破解。用户询问这种方法是否可行或是否为死胡同，并提到Instagram的限流机制和之前token hijacking未被重视的情况。

The seventh month is always a big one for Microsoft, and this year is no exception

BaitTrap is a large-scale campaign designed to deceive users through counterfeit news websites, spanning over 50 countries and fueling a surge in online investment fraud. Identified by CTM360, these deceptive domains—referred to as BNS...

The post BaitTrap Exposed: 17,000+ Fake News Sites Fueling Global Investment Scams appeared first on Penetration Testing Tools.

ZuRu malware continues to prey on macOS users seeking legitimate business tools, adapting its loader and C2 techniques to backdoor its targets.

The post macOS.ZuRu Resurfaces | Modified Khepri C2 Hides Inside Doctored Termius App appeared first on SentinelOne.

macOS.ZuRu是一种通过篡改合法应用程序传播的后门程序，最初通过中毒Baidu搜索结果感染用户。最新变种利用Termius等工具的恶意版本，在运行时下载Khepri C2信标并安装持久化模块以维持长期控制。

After 13 months of development, the stable release of Wayland 1.24 has been officially published—a protocol for interprocess communication and a suite of libraries powering modern graphical environments in Linux. This new version maintains...

The post Wayland 1.24 Released: Enhancing Linux Graphics & Compatibility appeared first on Penetration Testing Tools.

Malicious software has once again surfaced on the official Google Play Store, masquerading as an innocuous utility. This time, the campaign targeted North America, where the Android banking trojan known as Anatsa—also referred to...

The post Warning: Anatsa Banking Trojan Hits 90,000 Android Users Via Google Play appeared first on Penetration Testing Tools.

发表在《自然》期刊上的一项基因组研究确认了人畜共患病原体从动物传播到人类的最早时间点：6500 年前人类从狩猎采集转向畜牧业开始与动物生活在一起。澳大利亚病毒学家 Edward Holmes 称，这不是新观念，但研究人员用数据给出了证明。研究人员从欧亚大陆发现的 1,313 具古人类骨骼和牙齿中残留的血液提取 DNA 序列，寻找微生物基因组的痕迹。这些古代 DNA 所处时期跨越了 3.7 万年。研究识别出 5486 个来自细菌、病毒和寄生虫的 DNA 序列。人畜共患病原体仅在距今 6500 年或更短时间的遗骸中发现，约 5000 年前达到峰值。鼠疫杆菌 首次出现在该数据集中的时间是在 5700-5300 年前。

一年一度的“大考”火热进行中，攻防演练期间本公众号会每日更新当天鲜活情报和热点漏洞，欢迎大家对我们进行收藏和关注！

当前环境出现异常状态，需完成验证操作后方可继续访问相关内容或功能。

Bitchat 是 Jack Dorsey 开发的一款去中心化消息应用，基于蓝牙 mesh 网络实现离线通信。用户无需注册即可匿名交流，支持群组和私聊，并通过端到端加密保障隐私。该应用适合无网或网络受限环境下的沟通需求。

文章介绍了互联网发展史上的重要人物、神秘事件和网络文化现象，包括病毒创造者Dark Avenger、比特币发明者Satoshi Nakamoto、神秘组织Cicada 3301等。

随着交通战略的深入实施，铁路、公路、水运、航空等综合交通运输体系正加速数字化转型，网络安全面临全新挑战。智能高铁控制系统、自动驾驶公路网、智慧港口、民航空管系统等关键信息基础设施的互联互通，使得网络安全风险呈现跨领域、跨地域传导的新特征。 嘶吼安全产业研究院基于《2025网络安全产业图谱》调研，通过对400+典型解决方案与案例的深度分析，从需求匹配度、实践成效、创新技术、应用价值等多维度展开综合评估。 调研分析发现，交通行业网络安全建设呈现出三个主要趋势：网络安全防护范围已从传统的信息技术系统延伸至智能终端、互联路网、云端平台，三位一体的新型交通基础设施体系。这意味着安全防线要同时覆盖车载终端、路侧设备、云端平台等多个维度，建立立体化的防护网络。其次，安全标准正在升级。过去主要关注系统可用性，现在则要同时确保交通控制的精准性、实时性和可靠性。比如，交通信号控制系统必须能够抵御网络攻击，确保信号切换的准确无误。再者，数据安全被提到新高度。随着电子地图、出行轨迹等数据价值凸显，如何在保证数据流通的同时防止信息泄露，成为行业必须解决的难题。 基于这些发现，我们将重点展示几个具有代表性的交通行业优秀安全解决方案，为交通行业的安全建设提供可借鉴的实践经验。 PS：解决方案展示排名不分先后，按企业简称首字母排序。 往期回顾： 2025中国网络安全「政务行业」优秀解决方案汇编 2025中国网络安全「金融行业」优秀解决方案汇编 2025中国网络安全「能源行业」优秀解决方案汇编 2025中国网络安全「制造行业」优秀解决方案汇编 2025中国网络安全「电力（水利）行业」优秀解决方案汇编 2025中国网络安全「互联网行业」优秀解决方案汇编 2025中国网络安全「运营商行业」优秀解决方案汇编 2025中国网络安全「医疗行业」优秀解决方案汇编 2025中国网络安全「教育行业」优秀解决方案汇编

A vulnerability, which was classified as problematic, was found in Linux Kernel up to 6.15.3. Affected is the function arch_bpf_trampoline_size. The manipulation leads to allocation of resources. This vulnerability is traded as CVE-2025-38339. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.15.3. This issue affects the function p54_rx_eeprom_readback of the component wifi. The manipulation leads to buffer overflow. The identification of this vulnerability is CVE-2025-38348. The attack needs to be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Linux Kernel up to 6.6.94/6.12.34/6.15.3. This vulnerability affects the function hung_task_timeout_secs of the file /proc/sys/kernel/hung_task_timeout_secs of the component f2fs. The manipulation leads to deadlock. This vulnerability was named CVE-2025-38347. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic has been found in Linux Kernel up to 6.6.94/6.12.34/6.15.3. This affects an unknown part of the component wifi. The manipulation leads to privilege escalation. This vulnerability is uniquely identified as CVE-2025-38343. The attack can only be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.15.3. It has been rated as problematic. Affected by this issue is the function software_node_get_reference_args. The manipulation leads to out-of-bounds read. This vulnerability is handled as CVE-2025-38342. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.