Aggregator

关键词数据泄露在全球最大的黑客大会之一 DEF CON 上，传奇黑客刊物 Phrack 迎来创刊 40 周年之

关键词数据泄露“台外事部门”近日被曝出疑似电子公文外流，并在暗网兜售，引发各界关注。

Most security tools can’t see what happens inside the browser, but that’s where the majority of work, and risk, now lives. Security leaders deciding how to close that gap often face a choice: deploy a dedicated Enterprise Browser or add an enterprise-grade control layer to the browsers employees already use and trust. The Ultimate Battle: Enterprise Browsers vs. Enterprise Browser Extensions

Пока NASA буксует, Китай проходит путь от чертежей до реальных испытаний за полгода.

A vulnerability, which was classified as problematic, has been found in GitLab Enterprise Edition. Affected by this issue is some unknown functionality of the component Project Export Handler. The manipulation leads to information disclosure. This vulnerability is handled as CVE-2023-1825. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Master Addons Plugin up to 2.0.8.6 on WordPress and classified as problematic. Affected by this vulnerability is an unknown functionality of the component FancyBox. The manipulation leads to cross site scripting. This vulnerability is known as CVE-2025-8874. The attack can be launched remotely. There is no exploit available.

A vulnerability was found in B Slider Plugin up to 1.1.30 on WordPress and classified as critical. Affected by this issue is the function activated_plugin of the component Plugin Installation Handler. The manipulation leads to missing authorization. This vulnerability is handled as CVE-2025-8418. The attack may be launched remotely. There is no exploit available.

A vulnerability, which was classified as critical, was found in Phoenix Contact DaUM. This affects an unknown part of the file nssm.exe. The manipulation leads to missing authentication. This vulnerability is uniquely identified as CVE-2025-41686. An attack has to be approached locally. There is no exploit available. It is recommended to upgrade the affected component.

为深入贯彻《中共中央办公厅、国务院办公厅关于加快公共数据资源开发利用的意见》，建立健全本市公共数据资源开发利用制度机制，持续推进公共数据高质量供给，经北京市委市政府同意，发布20条实施意见。

在国家数据局指导下，全国数据标准化技术委员会秘书处牵头研制了数据基础设施3项技术文件、可信数据空间3项技术文件（见附件1-6），经研究讨论、修改完善，形成技术文件征求意见稿。

近日，国家互联网信息办公室发布《国家信息化发展报告（2024年）》（以下简称《报告》），系统总结2024年我国信息化发展新成效，评估分析全国信息化发展水平，展望信息化发展形势和下一步重点方向，为各地区、各部门推进信息化发展提供了重要参考。

政府部门在履职过程中收集和产生的政务数据，是国家重要的基础性战略资源。近期，《政务数据共享条例》（以下简称《条例》）正式出台，并于2025年8月1日起施行。

要做好AI大模型应用的安全，需要懂AI、懂安全、在AI业务上进行大量实践和AI安全语料的长期积累。

凝聚行业协同之力 多方共建威胁情报新生态!

A vulnerability, which was classified as critical, was found in Linux Kernel. Affected is the function cgroup1_parse_param of the file kernel/cgroup/cgroup-v1.c of the component cgroup v1 Parser. The manipulation of the argument syscall leads to use after free. This vulnerability is traded as CVE-2021-4154. It is possible to launch the attack remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability has been found in Linux Kernel up to 6.6.17/6.7.5 and classified as critical. Affected by this vulnerability is an unknown functionality of the component rtla. The manipulation leads to buffer overflow. This vulnerability is known as CVE-2024-26818. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 5.12.10 and classified as critical. This vulnerability affects unknown code of the file netjet.c of the component nj_probe. The manipulation leads to denial of service. This vulnerability was named CVE-2021-47284. The attack can only be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Croc up to 9.6.5. It has been rated as critical. Affected by this issue is some unknown functionality of the component Escape Sequence Handler. The manipulation leads to escaping of output. This vulnerability is handled as CVE-2023-43620. The attack needs to be initiated within the local network. There is no exploit available.

该团队在卫星软件供应链组件上发现了大量漏洞，可以花式展示各类黑掉卫星的方法