Aggregator

Когда VPN — это преступление, а лайк может испортить жизнь

Securitylab.ru
3 months 2 weeks ago
Статья детально анализирует модель китайского интернета, включая систему цензуры и фильтрации, заблокированные международные платформы и их местные аналоги, законодательную базу регулирования, систему социального кредита, влияние на бизнес и перспективы развития цифровой экосистемы Китая.

Strider Spark protects organizations from state-sponsored threats

Help Net Security
3 months 2 weeks ago

Strider announced new capabilities for Spark, the company’s proprietary AI-powered intelligence engine that is transforming how organizations identify and mitigate risks associated with state-sponsored threats. Industry, government, and academic organizations are vulnerable to ongoing nation-state operations that target and compromise networks, intellectual property, people, and supply chains. Spark delivers detailed threat analysis within seconds to provide organizations with deeper insights into the risk environment through a streamlined interface that includes intuitive, query-based exploration. Spark enables … More →

The post Strider Spark protects organizations from state-sponsored threats appeared first on Help Net Security.

Industry News

CVE-2021-25254 | Yandex Browser Lite prior 21.1.0 on Android ui layer

VulDB Recent Entries
3 months 2 weeks ago
A vulnerability was found in Yandex Browser Lite on Android. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to improper restriction of rendered ui layers. This vulnerability is handled as CVE-2021-25254. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-4949 | Eclipse JGit up to 7.2.0.202503040940-r XML File Parser ManifestParser xml external entity reference

VulDB Recent Entries
3 months 2 weeks ago
A vulnerability was found in Eclipse JGit up to 7.2.0.202503040940-r. It has been declared as problematic. Affected by this vulnerability is the function ManifestParser of the component XML File Parser. The manipulation leads to xml external entity reference. This vulnerability is known as CVE-2025-4949. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

Google Chrome's Built-in Manager Lets Users Update Breached Passwords with One Click

The Hackers News
3 months 2 weeks ago
Google has announced a new feature in its Chrome browser that lets its built-in Password Manager automatically change a user's password when it detects the credentials to be compromised. "When Chrome detects a compromised password during sign in, Google Password Manager prompts the user with an option to fix it automatically," Google's Ashima Arora, Chirag Desai, and Eiji Kitamura said. "On
The Hacker News

报纸刊登的推荐书单名被发现多数是 AI 捏造的

Solidot
3 months 2 weeks ago
《芝加哥太阳报(Chicago Sun-Times)》周日刊登了夏季推荐书单（Summer reading list for 2025），被发现推荐的 15 本书有 10 本是 AI 虚构的，书根本不存在，但作者是真实存在的，比如 Isabel Allende 的《Tidewater Dreams》和 Andy Weir 的《Last Algorithm》。书单作者 Marco Buscaglia 证实他使用了 AI 去生成内容，他表示自己通常会对 AI 生成内容进行真实性核查，但这一次没有，他称这完全是自己的错，对此感到尴尬。《芝加哥太阳报》通过社交媒体发表声明称正对此展开调查，表示将会公布调查结果。

Akira

Dark Feed IO
3 months 2 weeks ago

You must login to view this content

cohenido

Akira

Dark Feed IO
3 months 2 weeks ago

You must login to view this content

cohenido

美国大学城走向萧条

Solidot
3 months 2 weeks ago
美国地区性州立大学入学人数大幅下降，这些大学所在的城市从繁荣走向了萧条。与此同时，顶尖大学的入学人数则在继续增长。位于伊利诺伊州 Macomb 的西伊利诺伊大学自 2010 年以来入学人数暴跌了 47%，导致 Macomb 人口下降 23% 至 14,765 人。空置的宿舍被重新利用或拆除，当地企业则艰难求生。对美国 748 所公立四年制大学的分析显示，2015-2023 年间知名州立大学的入学人数增长了 9%，地区性州立学校的入学人数下降了 2%。田纳西大学诺克斯维尔分校的入学人数增长了 30%，该州地区性学院的入学人数总体下降了 3%。美国高中毕业生人数预计从明年开始下降，大学城前景黯淡。

CVE-2025-4611 | Slim SEO Plugin up to 4.5.3 on WordPress Shortcode slim_seo_breadcrumbs cross site scripting

VulDB Recent Entries
3 months 2 weeks ago
A vulnerability was found in Slim SEO Plugin up to 4.5.3 on WordPress. It has been classified as problematic. Affected is the function slim_seo_breadcrumbs of the component Shortcode Handler. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2025-4611. It is possible to launch the attack remotely. There is no exploit available.
vuldb.com

CVE-2025-4221 | Animated Buttons Plugin up to 1.0.0 on WordPress Shortcode auto-downloader cross site scripting

VulDB Recent Entries
3 months 2 weeks ago
A vulnerability was found in Animated Buttons Plugin up to 1.0.0 on WordPress and classified as problematic. This issue affects the function auto-downloader of the component Shortcode Handler. The manipulation leads to cross site scripting. The identification of this vulnerability is CVE-2025-4221. The attack may be initiated remotely. There is no exploit available.
vuldb.com

CVE-2025-4217 | WP YouTube Video Optimizer Plugin up to 1.2 on WordPress Shortcode ib_youtube cross site scripting

VulDB Recent Entries
3 months 2 weeks ago
A vulnerability, which was classified as problematic, was found in WP YouTube Video Optimizer Plugin up to 1.2 on WordPress. This affects the function ib_youtube of the component Shortcode Handler. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2025-4217. It is possible to initiate the attack remotely. There is no exploit available.
vuldb.com

CVE-2025-3750 | Network Posts Extended Plugin up to 7.7.1 on WordPress post_height cross site scripting

VulDB Recent Entries
3 months 2 weeks ago
A vulnerability, which was classified as problematic, has been found in Network Posts Extended Plugin up to 7.7.1 on WordPress. Affected by this issue is some unknown functionality. The manipulation of the argument post_height leads to cross site scripting. This vulnerability is handled as CVE-2025-3750. The attack may be launched remotely. There is no exploit available.
vuldb.com

CVE-2025-3781 | Raisely Donation Form Plugin up to 1.0 on WordPress Shortcode raisely_donation_form cross site scripting

VulDB Recent Entries
3 months 2 weeks ago
A vulnerability classified as problematic has been found in Raisely Donation Form Plugin up to 1.0 on WordPress. Affected is the function raisely_donation_form of the component Shortcode Handler. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2025-3781. It is possible to launch the attack remotely. There is no exploit available.
vuldb.com

Managed ad