【安全圈】Cloudflare推出“按爬取付费”功能：网站可向AI爬虫收费获取内容
关键词cloud flare互联网服务提供商Cloudflare日前宣布启动一项新功能，旨在应对AI公司未经授
Aggregator
【0703】重保演习每日情报汇总
2 months 1 week ago
一年一度的“大考”火热进行中，攻防演练期间本公众号会每日更新当天鲜活情报和热点漏洞，欢迎大家对我们进行收藏和关注！
N Korean Hackers Drop NimDoor macOS Malware Via Fake Zoom Updates
2 months 1 week ago
SentinelLabs uncovers NimDoor, new North Korea-aligned macOS malware targeting Web3 and crypto firms. Exploits Nim, AppleScript, and steals Keychain, browser, shell, and Telegram data.
Deeba Ahmed
速修复！Grafana 修复中存在四个严重的RCE漏洞
2 months 1 week ago
速修复
思科 Unified CM 中存在满分漏洞，可用于获得root权限
2 months 1 week ago
速修复
Hunters International ransomware shuts down, releases free decryptors
2 months 1 week ago
The Hunters International Ransomware-as-a-Service (RaaS) operation announced today that it has officially closed down its operations and will offer free decryptors to help victims recover their data without paying a ransom. [...]
Sergiu Gatlan
Top 10 Best Google Alternatives In 2025
2 months 1 week ago
Absolutely! Here’s a comprehensive, SEO-optimized, and human-readable review article, Top 10 Best Google Alternatives in 2025, with extended introductions (5-6 lines each) for every tool and all requested formatting. The article is structured for maximum user value, features a comparison table, and covers all major SEO factors. Each tool includes an in-depth introduction, specifications, features, […]
The post Top 10 Best Google Alternatives In 2025 appeared first on Cyber Security News.
Cyber Writes Team
Over 40 Malicious Firefox Extensions Target Cryptocurrency Wallets, Stealing User Assets
2 months 1 week ago
Cybersecurity researchers have uncovered over 40 malicious browser extensions for Mozilla Firefox that are designed to steal cryptocurrency wallet secrets, putting users' digital assets at risk.
"These extensions impersonate legitimate wallet tools from widely-used platforms such as Coinbase, MetaMask, Trust Wallet, Phantom, Exodus, OKX, Keplr, MyMonero, Bitget, Leap, Ethereum Wallet, and Filfox
The Hacker News
"Алло, это root?" — телефония Cisco может ответить не вам
2 months 1 week ago
Уязвимость Cisco превращает телефонию в ахиллесову пяту.
213% Increase in Ransomware Attacks Targeting Organizations With First Quarter of 2025
2 months 1 week ago
The first quarter of 2025 has witnessed an unprecedented surge in ransomware attacks, with 2,314 victims listed across 74 unique data leak sites, representing a staggering 213% increase compared to the 1,086 victims recorded in the same period last year. This dramatic escalation marks a significant departure from the relatively stable ransomware landscape observed throughout […]
The post 213% Increase in Ransomware Attacks Targeting Organizations With First Quarter of 2025 appeared first on Cyber Security News.
Tushar Subhra Dutta
CVE-2025-47560 | RomanCode MapSVG Plugin up to 8.5.32 on WordPress authorization
2 months 1 week ago
A vulnerability classified as problematic has been found in RomanCode MapSVG Plugin up to 8.5.32 on WordPress. This affects an unknown part. The manipulation leads to missing authorization.
This vulnerability is uniquely identified as CVE-2025-47560. It is possible to initiate the attack remotely. There is no exploit available.
vuldb.com
CVE-2025-47558 | RomanCode MapSVG Plugin up to 8.5.31 on WordPress authorization
2 months 1 week ago
A vulnerability was found in RomanCode MapSVG Plugin up to 8.5.31 on WordPress. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to missing authorization.
This vulnerability was named CVE-2025-47558. The attack can be initiated remotely. There is no exploit available.
vuldb.com
CVE-2025-47561 | RomanCode MapSVG Plugin up to 8.5.34 on WordPress privileges assignment (EUVD-2025-17520)
2 months 1 week ago
A vulnerability was found in RomanCode MapSVG Plugin up to 8.5.34 on WordPress. It has been rated as critical. Affected by this issue is some unknown functionality. The manipulation leads to incorrect privilege assignment.
This vulnerability is handled as CVE-2025-47561. The attack may be launched remotely. There is no exploit available.
vuldb.com
CVE-2024-5647 | Magnific Popups Library Plugin up to 1.1.0 cross site scripting (EUVD-2024-54725)
2 months 1 week ago
A vulnerability classified as problematic was found in Magnific Popups Library Plugin up to 1.1.0. This vulnerability affects unknown code. The manipulation leads to cross site scripting.
This vulnerability was named CVE-2024-5647. The attack can be initiated remotely. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2025-0885 | OpenText GroupWise up to 24.4 authorization
2 months 1 week ago
A vulnerability classified as problematic was found in OpenText GroupWise up to 24.4. Affected by this vulnerability is an unknown functionality. The manipulation leads to incorrect authorization.
This vulnerability is known as CVE-2025-0885. It is possible to launch the attack on the local host. There is no exploit available.
vuldb.com
Sarcoma
2 months 1 week ago
You must login to view this content
cohenido
The Hidden Weaknesses in AI SOC Tools that No One Talks About
2 months 1 week ago
If you’re evaluating AI-powered SOC platforms, you’ve likely seen bold claims: faster triage, smarter remediation, and less noise. But under the hood, not all AI is created equal. Many solutions rely on pre-trained AI models that are hardwired for a handful of specific use cases. While that might work for yesterday’s SOC, today's reality is different.
Modern security operations teams face a
The Hacker News
基于MCP实现邮件攻击与防护探索
2 months 1 week ago
邮箱接入了MCP，怎么就自动发垃圾邮件了？
CVE-2025-5322 | e4jvikwp VikRentCar Car Rental Management System Plugin up to 1.4.3 on WordPress do_updatecar unrestricted upload (EUVD-2025-19909)
2 months 1 week ago
A vulnerability, which was classified as critical, was found in e4jvikwp VikRentCar Car Rental Management System Plugin up to 1.4.3 on WordPress. This affects the function do_updatecar. The manipulation leads to unrestricted upload.
This vulnerability is uniquely identified as CVE-2025-5322. It is possible to initiate the attack remotely. There is no exploit available.
vuldb.com
CVE-2025-38169 | Linux Kernel prior 6.12.34/6.15.3/6.16-rc1 fpsimd_thread_switch state issue (EUVD-2025-19775)
2 months 1 week ago
A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.12.33/6.15.2/25b90cd122d546823da90b916f7c3289dfe83a99/e003c485ac82a9f8de4204912ed059ac6dd4257c. Affected by this issue is the function fpsimd_thread_switch. The manipulation leads to state issue.
This vulnerability is handled as CVE-2025-38169. The attack can only be initiated within the local network. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com