Aggregator

Главный фокус: разработка ИИ-ассистентов и инструментов для повышения инженерной продуктивности.

基于机器学习的二次加密流量分类 by ourren

深入理解 AI 智能体（agent）的安全性 by tuhao

更多最新文章，请访问SecWiki

Google’s second-generation Chromecast and Chromecast Audio devices have been facing a widespread outage for the past five days. An expired intermediate CA certificate is said to be the cause of the outage. Recently, users of Google’s second-gen Chromecast and Chromecast Audio ran into an unexpected problem—their devices suddenly stopped working. Instead of streaming as usual, […]

The post Google Second-Gen Chromecast and Audio Devices Hit By A Major Outage—Expired Intermediate CA Certificate to Blame appeared first on Security Boulevard.

小白教学，纯介绍内存马是什么，入个门。

因为特朗普政府的科学政策以及对科研资金的削减，法国最大的大学艾克斯-马赛大学（Aix-Marseille Université）提出了邀请面临解雇或失业的科学家前往欧洲继续研究的计划。大学在一份新闻稿中称这项科学流放计划吸引了 NASA、NIH、耶鲁和斯坦福等机构科学家的浓厚兴趣。校长 Eric Berton 表示会尽可最大努力帮助美国科学家。有 40 多名美国科学家对该计划表达了兴趣。他们的主要研究领域包括：健康（LGBT+ 医学、流行病学、传染病、不平等、免疫学等）、环境和气候变化（自然灾害管理、温室气体、社会影响、AI）、人文和社会科学（传播、心理学、历史、文化遗产）、天体物理学。被称为 Safe Place for Science 的项目最初将为 15 名研究人员提供 1500 万欧元的资金，大学表示它已与地方政府和法国工商会密切合作，为这些科学家及其家人抵达该地区提供便利，为他们提供就业、住房、入学、交通和签证方面的支持。

A Russian-speaking actor using the Telegram handle @ExploitWhispers leaked internal chat logs of Black Basta Ransomware-as-a-Service (RaaS) members on February 11, 2025. These communications, spanning from September 2023 to September 2024, have provided security researchers with unprecedented insight into the group’s operational tactics and infrastructure used to target organizations across multiple sectors. Black Basta, which […]

The post Black Basta Ransomware Attack Edge Network Devices With Automated Brute Force Attacks appeared first on Cyber Security News.

Amazon Web Services’ Simple Notification Service (AWS SNS) is a versatile cloud-based pub/sub service that facilitates communication between applications and users. While its scalability and integration capabilities make it a powerful tool for organizations, its misuse by adversaries for malicious purposes such as data exfiltration and phishing has raised significant security concerns. This article delves […]

The post AWS SNS Exploited for Data Exfiltration and Phishing Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A vulnerability, which was classified as critical, has been found in Tenda AC6 15.03.05.16. Affected by this issue is the function formSetSpeedWan. The manipulation leads to buffer overflow. This vulnerability is handled as CVE-2025-29029. Access to the local network is required for this attack. There is no exploit available.

A vulnerability classified as problematic was found in GLPI Inventory Plugin up to 1.4.x. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting. This vulnerability is known as CVE-2025-26626. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in Tenda AC9 15.03.05.19. Affected is the function formWifiWpsOOB. The manipulation leads to buffer overflow. This vulnerability is traded as CVE-2025-29032. The attack needs to be done within the local network. There is no exploit available.