Aggregator

A Mirai Offshoot Uses DVR Command Injection Bug to Spread, Hitting 50,000 Devices
A Mirai botnet malware variant is targeting a command injection vulnerability in internet-connected digital video recorders used for CCTV surveillance, enabling attackers to take control of the devices and add them to a botnet. A security researcher first identified the vulnerability in April 2024.

A vulnerability has been found in upKeeper Solutions upKeeper Instant Privilege Access up to 1.3.x and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to improper privilege management. This vulnerability is known as CVE-2025-4681. Local access is required to approach this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in upKeeper Solutions upKeeper Instant Privilege Access up to 1.3.x. Affected is an unknown function. The manipulation leads to improper access controls. This vulnerability is traded as CVE-2025-4680. An attack has to be approached locally. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Schneider Electric EVLink WallBox. This issue affects some unknown processing of the component Configuration Handler. The manipulation leads to os command injection. The identification of this vulnerability is CVE-2025-5743. The attack may be initiated remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability classified as critical was found in Schneider Electric Modicon Controllers M241, Modicon Controllers M251, Modicon Controllers M258 and Modicon Controllers LMC058. This vulnerability affects unknown code of the component HTTPS Request Handler. The manipulation leads to denial of service. This vulnerability was named CVE-2025-3116. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in Schneider Electric EVLink WallBox. This affects an unknown part. The manipulation leads to path traversal. This vulnerability is uniquely identified as CVE-2025-5740. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability was found in Schneider Electric Modicon Controllers M241, Modicon Controllers M251, Modicon Controllers M258, Modicon Controllers LMC058 and Modicon Controllers M262. It has been rated as critical. Affected by this issue is some unknown functionality of the component HTTPS Request Handler. The manipulation leads to denial of service. This vulnerability is handled as CVE-2025-3898. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Schneider Electric Modicon Controllers M241 and Modicon Controllers M251. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Header Handler. The manipulation of the argument Content-Length leads to resource consumption. This vulnerability is known as CVE-2025-3112. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Schneider Electric EVLink WallBox. It has been classified as critical. Affected is an unknown function. The manipulation leads to path traversal. This vulnerability is traded as CVE-2025-5741. It is possible to launch the attack remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

拆解多种常见的混淆手法、分析多种优秀开源混淆器的实现

FBI 警告 BadBox 2.0 感染全球物联网设备

看雪论坛作者ID：Brinmon

美国防部正着手解决启动CMMC计划的两大障碍

A vulnerability was found in ZKT ZKBio CVSecurity up to 6.4.1. It has been rated as critical. Affected by this issue is some unknown functionality of the component Service Console. The manipulation leads to hard-coded credentials. This vulnerability is handled as CVE-2025-45746. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.

The Advanced Persistent Threat (APT) group known as “Librarian Ghouls,” also tracked as “Rare Werewolf” and “Rezet,” has been actively targeting organizations across Russia and the Commonwealth of Independent States (CIS) with highly sophisticated malware deployment campaigns. Active through May 2025, this group has demonstrated a consistent focus on Russian companies, employing targeted phishing emails […]

The post Malware Deployment Campaigns: ‘Librarian Ghouls’ APT Group Targets Organizations appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

This post first appeared on blog.netwrix.com and was written by Dirk Schrader.
On April 15th of 2024, ISC² implemented a refreshed set of objectives for the CISSP exam. The goal of refreshing the exam objectives is to keep the exam relevant to the latest happenings in security. As things progress and new technologies are introduced, the objectives are updated to account for them as well as for … Continued

人们很容易认为，电灯和室内卧室等现代便利设施使我们摆脱了阳光对睡眠的自然影响。但研究显示我们的昼夜节律仍然强烈地响应白天的季节变化。这一发现可能为研究和理解季节性情感障碍提供新的方法。它还可能为研究其他健康状况开辟新的途径，这些健康状况受我们的睡眠模式与体内生物钟一致程度的影响。科学家通过研究数千人使用 Fitbits 等可穿戴健康设备的睡眠数据，发现人们的昼夜节律与阳光的季节性相适应。参与者都是完成一年实习的住院医生，他们都参加了实习生健康研究。实习生是轮班工人，他们的时间表经常改变，这意味着他们的睡眠时间表也经常改变。此外，这些时间表往往与昼夜的自然循环不一致。

Он расшифровал математическое послание из другого измерения.

近日，绿盟科技CERT监测到Apache发布安全公告，修复了Apache Kafka中的任意文件读取与SSRF漏洞（CVE-2025-27817）。目前已有细节披露，请相关用户尽快采取措施进行防护。