Aggregator

FCTS 2025网络犯罪打击治理实战技术研讨会，自2021年创办以来，历经四届沉淀，已成为全国网络犯罪打击治理领域的标杆性专业研讨会，始终以“赋能实战”为核心，为网络犯罪打击治理领域的同仁们提供宝贵的交流与研讨机会。

数学家张益唐称他是因为政治气候从美国回到中国。张益唐是在今年六月离开加州圣巴巴拉，受聘于中山大学香港高等研究院，在大湾区定居和工作。张证明了存在无穷多对间隙小于 7000 万的相邻素数对，在数学史上第一次实质性推进解决著名数论难题“孪生素数猜想”，并在与黎曼猜想有关的朗道-西格尔零点猜想上取得重要进展。他表示有很多华裔学者和教授回到了中国。他说自己所处的数学领域没有受到多少政治气候的影响，但计算机、芯片或任何与军工相关的研究人员需要小心。他称，数学，尤其是理论数学，一大优势是展开研究不必局限于特定地点。

Cybersecurity researchers have discovered a malicious Go module that presents itself as a brute-force tool for SSH but actually contains functionality to discreetly exfiltrate credentials to its creator. "On the first successful login, the package sends the target IP address, username, and password to a hard-coded Telegram bot controlled by the threat actor," Socket researcher Kirill Boychenko

A vulnerability identified as problematic has been detected in IBM Cognos Analytics up to 12.0.4. This impacts an unknown function. Performing manipulation results in inclusion of sensitive information in source code. This vulnerability is identified as CVE-2025-0923. The attack can be initiated remotely. There is not any exploit available. You should upgrade the affected component.

A vulnerability labeled as critical has been found in IBM Cognos Analytics up to 12.0.4. Affected is an unknown function. Executing manipulation can lead to allocation of resources. This vulnerability is tracked as CVE-2025-25032. The attack can be launched remotely. No exploit exists. The affected component should be upgraded.

A vulnerability marked as problematic has been reported in IBM Cognos Analytics up to 12.0.4. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting. This vulnerability is listed as CVE-2025-0917. The attack may be initiated remotely. There is no available exploit. It is suggested to upgrade the affected component.

A vulnerability was found in IBM Security Verify Governance 10.0.2. It has been declared as critical. Affected is an unknown function. The manipulation results in weak password requirements. This vulnerability is known as CVE-2024-22330. It is possible to launch the attack remotely. No exploit is available. It is recommended to upgrade the affected component.

A vulnerability was found in IBM Verify Identity Access Digital Credentials 24.06. It has been rated as problematic. Affected by this vulnerability is an unknown functionality of the component HTTP POST Request Handler. This manipulation causes missing reference to active allocated resource. This vulnerability is handled as CVE-2024-56343. The attack can be initiated remotely. There is not any exploit available. Upgrading the affected component is advised.

A GOP congressman from Arizona has filed legislation to allow U.S. presidents to license private cyber experts to investigate cyberattacks against U.S. organizations and citizens and recover stolen assets through a centuries-old tactic used in the Age of Sail, when the U.S. and other countries hired private ships to attacks enemy boats.

The post U.S. Rep Proposes Cyber Privateers to Fight Foreign Cyberthreats appeared first on Security Boulevard.

亚利桑那州共和党众议员大卫·施韦克特提出《2025年诈骗农场悬赏与报复授权法案》，借鉴海盗时代的“私掠许可证”制度，授权总统发放“网络私掠许可证”，允许私人网络安全专家打击跨国网络诈骗集团和诈骗农场。法案旨在利用宪法赋予的权力对抗网络威胁。

前些天有次和同事讨论，话题里涉及到时间管理。或许这是个值得每个人都想想的话题。

免责声明由于传播、利用本公众号红云谈安全所提供的信息而造成的任何直接或者间接的后果及损失，均由使用者本人负责

A vulnerability was found in vim 9.1.0000. It has been classified as problematic. Affected is the function __memmove_avx_unaligned_erms of the file memmove-vec-unaligned-erms.S. The manipulation leads to memory corruption. This vulnerability is documented as CVE-2025-9389. The attack needs to be performed locally. Additionally, an exploit exists. Some users are not able to reproduce this. One of the users mentions that this appears not to be working, "when coloring is turned on".

Защита данных пользователей важнее законов других стран.

一个黑客社区欢迎新手到资深人士加入，提供问答和学习资源，并邀请访问其Discord服务器。

这是一个开放的黑客社区论坛r/HowToHack,旨在帮助新手成长为地下技能专家。用户可以提问、解答和学习,并通过Discord(https://discord.gg/ep2uKUG)进行交流,目前有大量在线成员参与互动。

A vulnerability categorized as critical has been discovered in Python Documentation 2/3. This vulnerability affects unknown code of the component Sorting. Executing manipulation can lead to incorrect calculation. This vulnerability is registered as CVE-2019-17514. It is possible to launch the attack remotely. No exploit is available. This vulnerability has historical importance owing to its background and reception. It is advisable to upgrade the affected component.

寻找基于科学参考的事实书籍而非轶事类作品的原因：教科书提供可应用于无限场景的原则，而仅靠故事需阅读大量书籍才能理解原则，浪费时间。

A vulnerability has been found in DCN DCME-720 9.1.5.11 and classified as critical. This affects an unknown function of the file /usr/local/www/function/audit/newstatistics/ip_block.php of the component Web Management Backend. Performing manipulation of the argument ip results in os command injection. This vulnerability is cataloged as CVE-2025-9387. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. Other products might be affected as well. The vendor was contacted early about this disclosure but did not respond in any way.