Aggregator

Ransomware isn’t dying — it’s evolving, swapping encryption for aggressive extortion as attacks and data theft hit record highs.

The post Ransomware: Still Dangerous After All These Years appeared first on Security Boulevard.

SonicWall SMA 500设备被爆多个高危漏洞，从未授权访问到任意代码执行，安全防线瞬间崩塌！

文章指出当前环境出现异常情况，用户需完成验证后方可继续访问。

Submit #622329 / VDB-319232

Submit #622328 / VDB-319231

A sophisticated cybercriminal operation known as GreedyBear has orchestrated one of the most extensive cryptocurrency theft campaigns to date, deploying over 650 malicious tools across multiple attack vectors to steal more than $1 million from unsuspecting victims. Unlike traditional threat groups that typically specialize in single attack methods, GreedyBear has adopted an industrial-scale approach, simultaneously […]

The post Biggest Ever GreedyBear Attack With 650 Hacking Tools Stolen $1 Million from Victims appeared first on Cyber Security News.

Два трояна в NPM притворяются библиотеками для WhatsApp. Почему их до сих пор не удалили?

埃隆·马斯克计划在xAI的Grok AI聊天机器人中添加广告以支付高昂的GPU费用，并认为Grok已达到全球最智能和精准的目标。广告将在用户提问时投放以提高点击率和转化率。xAI收购X/Twitter后，广告也可能出现在该平台上。

A vulnerability classified as problematic has been found in GNU Bison up to 3.8.2. Affected is the function code_free of the file src/scan-code.c. The manipulation leads to double free. This vulnerability is traded as CVE-2025-8734. The attack needs to be approached locally. Furthermore, there is an exploit available.

A vulnerability was found in GNU Bison up to 3.8.2. It has been rated as problematic. This issue affects the function __obstack_vprintf_internal of the file obprintf.c. The manipulation leads to reachable assertion. The identification of this vulnerability is CVE-2025-8733. It is possible to launch the attack on the local host. Furthermore, there is an exploit available.

Le minacce informatiche sono sempre più sofisticate, frequenti e dannose. Secondo Statista, entro il

Lawmakers Demand Answers From UHG Amid New Breach and Growing Fallout
When you've been the victim of the largest health data breach in U.S. history, and you've been under intense public and regulatory scrutiny for months, the last thing you want to do is to report another major breach less than a year after the last one. But that just happened to UnitedHealth Group.

Chipmaker Argues Against Growing Interest in US to Require New Security Measures
Artificial intelligence chip-making powerhouse Nvidia is rejecting claims from China’s top cyber agency that its H20 chips include location tracking and kill-switch features - while warning U.S. lawmakers against requiring those capabilities in future chip designs.

CISA Issues Emergency Directive Requiring Federal Agencies to Fix Flaw
A vulnerability in Exchange hybrid deployments could allow attackers to escalate privileges and gain administrative access to cloud-based environments. Microsoft said Tuesday there is no evidence of its exploitation and "strongly" recommended installing hot fix updates made available in April.

Also: Ukrainian Hackers Find Evidence of Russian Child Abduction
This week, a Chinese duo arrested in Los Angeles for illegal artificial intelligence chip exports back to China, France extradited an accused Nigerian hacker, Ukraine hacked Crimean servers, Florida prison email leak, Tea App clone exposed users’ IDs.

4 Bugs Affecting at Least 6,500 Camera Servers Enable Pre-Auth Attacks on Devices
Researchers who uncovered four severe flaws in Axis Communications' video management and camera software say thousands of internet-connected surveillance systems are vulnerable to remote attacks. Attackers can execute arbitrary code without authentication.

8月7日，ISC.AI 2025创新独角兽沙盒大赛巅峰对决圆满落下帷幕。

Cobalt 发布了《2025年CISO安全洞察报告》，揭示了当前企业在人工智能（AI）、第三方风险与内部威胁方面的核心安全挑战及应对策略。