Aggregator

Четыре псевдонима, сотни жертв — кто скрывается под маской интернет-фантома?

在经历了那么多伦的 JDBC 的攻防绕过，竟然还能有最新的绕过手法，学习了技巧后,发现核心原理就是 json 的解析覆盖属性，以前也用过这个 trick，没想到还能在 jdbc 绕过用到这个 trick，而且感觉这个思路很容易再去使用到其他框架上

Cybersecurity researchers have disclosed details of a new campaign that leverages ConnectWise ScreenConnect, a legitimate Remote Monitoring and Management (RMM) software, to deliver a fleshless loader that drops a remote access trojan (RAT) called AsyncRAT to steal sensitive data from compromised hosts. "The attacker used ScreenConnect to gain remote access, then executed a layered VBScript and

此次钓鱼攻击与植入的恶意软件均表明，网页浏览器已成为窃取凭据、篡改流量及入侵网络的巨大攻击面。

You type your email address into a website form but never hit submit. Hours later, a marketing email shows up in your inbox. According to new research, that is not a coincidence. A team of researchers from UC Davis, Maastricht University, and other institutions has found that many websites collect keystrokes as users type, sometimes before a form is ever submitted. The study explores how third-party scripts capture and share this information in ways that … More →

The post When typing becomes tracking: Study reveals widespread silent keystroke interception appeared first on Help Net Security.

京东信息安全部诚邀你的加入~

Разбираем роль GET, HEAD и POST, а также когда действительно требуются PUT, PATCH, DELETE и OPTIONS.

Submit #635871 / VDB-323615

Submit #635870 / VDB-323614

On September 8th, 2025, at approximately 9AM EST, the npm ecosystem faced an acute supply chain attack. A threat actor leveraged social engineering techniques to compromise the account of well-known npm developer Qix, subsequently publishing malicious releases for several widely-used packages, most notably debug, chalk, and dozens of related dependencies. Within two hours of the […]

The post Hackers Reap Minimal Gains from Massive npm Supply Chain Breach appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

介绍映像伪装常见的几种手法

Submit #642812 / VDB-322398

Submit #642716 / VDB-323613

A vulnerability, which was classified as problematic, has been found in SEAT Queue Ticket Kiosk up to 20250827. This affects an unknown part of the component Java RMI Registry Handler. This manipulation causes deserialization. This vulnerability is handled as CVE-2025-10252. The attack can only be done within the local network. Additionally, an exploit exists. It is advisable to implement restrictive firewalling. The vendor was contacted early about this disclosure but did not respond in any way.

In this Help Net Security interview, Gregory Richardson, Vice President, Advisory CISO Worldwide, at BlackBerry, talks about the growing risks to communications networks. He explains why attackers focus on these networks and how their motivations range from corporate espionage to geopolitical influence. The discussion also covers practical ways to secure networks and maintain reliable communication. Which types of communications networks are most attractive to attackers, and what are the primary motivations driving these attacks, such … More →

The post How attackers weaponize communications networks appeared first on Help Net Security.

Российский NGFW с архитектурой следующего поколения для корпоративных сетей.

A vulnerability classified as critical was found in FoxCMS up to 1.24. Affected by this issue is the function batchCope of the file /app/admin/controller/Images.php. The manipulation of the argument ids results in sql injection. This vulnerability is known as CVE-2025-10251. It is possible to launch the attack remotely. Furthermore, an exploit is available. The vendor was contacted early about this disclosure but did not respond in any way.

Submit #642598 / VDB-323612

A vulnerability classified as problematic has been found in jsondiffpatch up to 0.7.1. Affected by this vulnerability is the function HtmlFormatter::nodeBegin. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2025-9910. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

Submit #642476 / VDB-323611