Aggregator

这周比赛太多了啊，1024这天摸鱼看了看这个“网信柏鹭杯”大学生网络空间安全精英赛，随便水了几题。

又是一个打CTF的周末，这周打了个祥云杯，喵喵主要在看Misc题目，摸鱼好累，又不能出去玩了，喵呜呜。

第一届PKU GeekGame来了，题目的点套的太多了，太顶了，打得比较自闭。

又是一年南邮校赛NCTF，今年的题目太难了啊，做不来做不来，本来还想恰烂钱的，最后摆烂了。

今年的Hackergame又来了，题目很有梯度，也学到了许多，明年有机会的话还来。

在前不久结束的DASCTF July中，有一道名为cybercms的web题目，当时打了半天没打通，赛后还是想不通就来稍微深入探究了一下。

摸鱼打了个DASCTF July，主要看了看Web和Misc题目，大部分是结束后边做边写的，写得还是挺详细的吧，当然也少不了走弯路的地方。

周末有个字节跳动CTF，咱摸鱼来打了打，最后队友带飞，打到了第十，太顶啦！

上周末和Asuri战队的师傅们一起办了个AsuriCTF/NUAACTF，喵喵出了两道Misc题目，这里来写写题解和出题思路，顺便复盘一下比赛运维的故事，记录一下心得体会。

A newly identified phishing campaign is abusing the legitimate Windows utility mshta.exe to execute malicious HTML Application (HTA) files, conduct system reconnaissance, and potentially deploy payloads designed to steal credentials and local secrets. Fortra’s Intelligence and Research Experts (FIRE) said the activity began in June and remains active, with operators regularly recompiling malware samples to […]

The post New Phishing Campaign Abuses Windows Mshta.exe to Steal Credentials and Secrets appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

ChatGPT научился строить финансовые модели, проводить исследования и готовить презентации для Уолл-стрит.

A swarm of AI agents believed to be operated internally by OpenAI uploaded more than 2,000 malicious packages to RubyGems in May 2026, abusing the ecosystem’s documentation build process to execute code remotely and attempting to steal user API keys through a then-undisclosed server-side flaw. Researchers Spencer Kitts, Thomas Larsen, and Sydney Von Arx said […]

The post OpenAI Agents Flood RubyGems With 2,000 Packages and Exploit Build System for RCE appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical GitLab flaw, tracked as CVE-2026-85706, to its Known Exploited Vulnerabilities catalog after confirming it was exploited in attacks. The issue affects both GitLab Community Edition and Enterprise Edition and requires urgent mitigation, particularly for internet-accessible GitLab instances. CVE-2026-85706 is a path traversal vulnerability […]

The post CISA Warns of Critical GitLab Vulnerability Exploited in Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Currently trending CVE - Hype Score: 7 - A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device to obtain root access to the underlying operating ...

Currently trending CVE - Hype Score: 7 - When a BIG-IP APM access policy is configured on a virtual server, specific malicious traffic can lead to Remote Code Execution (RCE).   Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Цепочка ошибок позволяет пройти путь от анонимного запроса до полного контроля.

A vulnerability was found in Ruby mruby 4.0.0 and classified as problematic. The impacted element is an unknown function of the component Prism parser. Such manipulation leads to null pointer dereference. This vulnerability is documented as CVE-2026-79590. The attack can be executed remotely. There is not any exploit available.

A vulnerability marked as critical has been reported in Net-SNMP up to 5.9.5.2. This affects the function smux_accept of the component SMUX module. Performing a manipulation results in denial of service. This vulnerability is cataloged as CVE-2026-89147. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability has been found in wpa_supplicant up to 2.11 and classified as very critical. Affected is an unknown function of the file wpa.c of the component Driver Based PMKSA Selection Path. Performing a manipulation results in improper access controls. This vulnerability is cataloged as CVE-2026-78807. The attack must be initiated from a local position. There is no exploit available. The affected component should be upgraded.

A vulnerability was found in Gohugoio Hugo up to 0.164.x. It has been rated as problematic. Affected is the function os.ReadFile of the component Symlink. Performing a manipulation results in path traversal. This vulnerability was named CVE-2026-89258. The attack may be initiated remotely. There is no available exploit. Upgrading the affected component is advised.