Aggregator

China's Hack-For-Hire Scene Disgorges Another Leak
The Chinese nation-state threat actor tracked as Salt Typhoon is operated by a clutch of private firms whose clients include multiple Chinese government agencies, finds analysis of leaked data by Spy Cloud. Researchers found a spreadsheet listing buyers, sellers and financial transaction details.

Zenni Optical introduces Zenni ID Guard, a privacy-focused lens technology that reflects near-infrared light to help disrupt unwanted tracking. It’s a shield for your face, built right into your everyday glasses, all at an accessible price. The growing use of infrared-based biometric surveillance and facial recognition, often used without your knowledge, has sparked global privacy concerns. Zenni ID Guard is pioneering an accessible eyewear solution to disrupt this unwanted tracking, identifiable by its subtle iridescent … More →

The post Zenni ID Guard disrupts unwanted infrared facial tracking appeared first on Help Net Security.

文章讨论了人工智能（AI）的局限性及其在职场中的应用问题。尽管AI在某些任务上表现出色，但其能力被夸大和误用的情况普遍存在。人类对AI的过度期待和错误的人格化倾向导致了决策失误和资源浪费。文章强调了AI无法替代人类在创造力、情感理解、道德判断等领域的独特价值，并指出盲目采用AI可能导致企业长期发展的困境。

IPinfo launched Residential Proxy Detection API, extending its privacy detection capabilities to help security and fraud prevention teams identify one of the most evasive forms of anonymized IP traffic. Residential Proxy Detection is also available via downloadable database and Snowflake integration. Residential proxy networks have become a critical vector for fraud, account takeovers, and large-scale abuse. Unlike VPNs or datacenter proxies, residential proxies route traffic through real, residential IPs, masking the true origin of requests … More →

The post IPinfo boosts privacy detection capabilities with Residential Proxy Detection API appeared first on Help Net Security.

A vulnerability was found in Microsoft Windows. It has been rated as critical. This issue affects some unknown processing of the component Universal Print Management Service. The manipulation leads to use after free. The identification of this vulnerability is CVE-2025-47986. It is possible to launch the attack on the local host. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability classified as critical was found in Microsoft Windows. Affected by this vulnerability is an unknown functionality of the component Routing/Remote Access Service. The manipulation leads to heap-based buffer overflow. This vulnerability is known as CVE-2025-48824. The attack can be launched remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability was found in Microsoft Windows up to Server 2025. It has been rated as critical. Affected by this issue is some unknown functionality of the component Media. The manipulation leads to use after free. This vulnerability is handled as CVE-2025-49682. The attack may be launched remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability classified as critical has been found in SAP NetWeaver Application Server for Java 7.50. Affected is an unknown function. The manipulation leads to deserialization. This vulnerability is traded as CVE-2025-42963. It is possible to launch the attack remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability classified as critical was found in SAP S4HANA and SCM 4CORE 102 up to CM 700. This vulnerability affects unknown code of the component Characteristic Propagation. The manipulation leads to code injection. This vulnerability was named CVE-2025-42967. The attack can be initiated remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

Одна статья — и ваши данные уже на чёрном рынке.

A vulnerability was found in Microsoft SQL Server. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to heap-based buffer overflow. The identification of this vulnerability is CVE-2025-49717. The attack may be initiated remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

苹果在iOS 26中推出新API，允许开发者在欧盟市场开发替代电话和信息的应用程序。这些应用可拨打电话、发送短信和RCS消息，但需开发者在欧盟注册Apple Developer账户。该功能目前仅限于欧盟用户，并计划于秋季正式发布后上线。

A vulnerability classified as critical has been found in Microsoft Windows. Affected is an unknown function of the component Credential Security Support Provider Protocol. The manipulation leads to heap-based buffer overflow. This vulnerability is traded as CVE-2025-47987. The attack needs to be approached locally. There is no exploit available. It is recommended to apply a patch to fix this issue.

根据国家信息安全漏洞库（CNNVD）统计，本周（2025年6月30日至2025年7月6日）安全漏洞情况如下

Протокол обновлён: расширения, API и поддержка буферов.

A critical information disclosure vulnerability in Microsoft SQL Server, designated as CVE-2025-49719, allows unauthorized attackers to access sensitive data over network connections.  This vulnerability stems from improper input validation within SQL Server’s processing mechanisms, enabling attackers to disclose uninitialized memory contents without requiring authentication or user interaction.  Key Takeaways1. Critical SQL Server bug (CVE-2025-49719) exposes […]

The post Microsoft SQL Server 0-Day Vulnerability Exposes Sensitive Data Over Network appeared first on Cyber Security News.

Splunk has released critical security updates for its Enterprise platform, addressing multiple vulnerabilities in bundled third-party packages across several product versions. The company issued Advisory SVD-2025-0710 on July 7, 2025, urging immediate updates to protect against various security exposures ranging from informational to critical severity levels. Critical Security Updates Released Splunk Enterprise versions 9.4.3, 9.3.5, […]

The post Splunk Enterprise Addresses Vulnerabilities in Bundled Third-Party Packages – Update Now appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

用户发现一个关于章鱼弹出页面的视频链接，并对其构造和细节感到惊叹，希望逆向工程其机制并制作模板。作为Reddit新手，他寻求帮助。

A vulnerability was found in Microsoft Windows Server 2012 up to Server 2022 23H2 and classified as critical. Affected by this issue is some unknown functionality of the component KDC Proxy Service. The manipulation leads to use after free. This vulnerability is handled as CVE-2025-49735. The attack may be launched remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability, which was classified as critical, was found in SAP NetWeaver Enterprise Portal Administration 7.50. Affected is an unknown function. The manipulation leads to deserialization. This vulnerability is traded as CVE-2025-42964. It is possible to launch the attack remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.