Aggregator
CVE-2025-48060 | jq up to 1.7.1 jv.c jv_string_vfmt stack-based overflow (GHSA-p7rr-28xf-3m5w / Nessus ID 241573)
Why your security team feels stuck
Cybersecurity friction usually gets framed as a user problem: password policies that frustrate employees, MFA that slows down logins, or blocked apps that send workers into the arms of shadow IT. But there’s a different kind of friction happening behind the scenes, and it’s hitting security teams themselves. It shows up during incident response, threat hunting, and day-to-day tasks. It’s the drag of too many tools, rigid approval chains, and a lack of clarity about … More →
The post Why your security team feels stuck appeared first on Help Net Security.
CVE-2008-1974 | Horde Groupware 1.0.5/1.0.6 addevent.php url cross site scripting (EDB-31697 / Nessus ID 33144)
如何入门网络安全?并不是买课就行
Напиши диссертацию с помощью ИИ — получи инструкцию по взлому банкомата
US Announces Arresting Chinese Hacker Linked to HAFNIUM Group
It’s time to give AI security its own playbook and the people to run it
In this Help Net Security interview, Dr. Nicole Nichols, Distinguished Engineer in Machine Learning Security at Palo Alto Networks, discusses why existing security models need to evolve to address the risks of AI agents. She explains how organizations should approach threat modeling, governance, and monitoring for agents that can reason and act. Nichols also shares practical steps, like logging and clone-on-launch, to help keep systems secure as these agents grow more capable. Do you think … More →
The post It’s time to give AI security its own playbook and the people to run it appeared first on Help Net Security.
ZDI-CAN-27430: Docker
ZDI-CAN-27541: Microsoft
ZDI-CAN-27562: Docker
Zoom for Windows Flaw Allows Attackers to Trigger DoS Attacks
Security researchers have uncovered two significant vulnerabilities in Zoom Clients for Windows, exposing users to potential Denial of Service (DoS) attacks. The flaws, identified as classic buffer overflow vulnerabilities, could allow an authorized user to disrupt Zoom services via network access. Both issues have been assigned medium severity ratings, and Zoom has released updates to […]
The post Zoom for Windows Flaw Allows Attackers to Trigger DoS Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
CVE-2025-47128 | Adobe Framemaker up to 2020.8/2022.6 integer underflow (apsb25-66 / Nessus ID 241575)
CVE-2025-47130 | Adobe Framemaker up to 2020.8/2022.6 integer underflow (apsb25-66 / Nessus ID 241575)
微软自动奖励 – 一个 Chrome 插件,把 Bing 积分刷到 1000 多分了
美国秘密助台打造无人机学校
Даже один сатоши в зарплате — уже нарушение: Минтруд считает всё до последней цифры
网络安全信息与动态周报2025年第27期(6月30日-7月6日)
2025-07-08 HW情报分享(三)
Kanvas: Open-source incident response case management tool
Kanvas is an open-source incident response case management tool with a simple desktop interface, built in Python. It gives investigators a place to work with SOD (Spreadsheet of Doom) or similar files, so they can handle key tasks without jumping between different programs. “At its core, the tool leverages Excel as the backend. It includes a note-taking features that uses Markdown, allowing investigators to write structured, portable notes. These notes can be easily exported or … More →
The post Kanvas: Open-source incident response case management tool appeared first on Help Net Security.