Aggregator

随着人工智能技术的蓬勃发展，“人工智能+政务”应用路径，将呈现从“人工智能+单个政务事项”向“人工智能+一类政务事项”，再向“人工智能+绝大多数政务事项”发展的阶段性演进；并逐步实现“人工智能+政务”横纵贯通、条块联动……

日前，国家网信办、公安部联合起草的《大型网络平台个人信息保护规定（征求意见稿）》（以下简称《征求意见稿》）公开征求意见。《征求意见稿》立足新形势新挑战，围绕平台内部治理、数据处理规范、用户权益保障等方面进行精细化制度设计……

随着国家逐步重视低空经济发展，逐步将低空经济作为国家战略性信息产业，市场对低空领域相关产品的质量、安全和性能等方面提出更高要求，本文主要从法规政策、标准体系等视角，讨论低空经济发展中安全防护体系的构建。

《网络安全标识管理办法》公开征求意见

《网络安全标识管理办法》公开征求意见

《网络安全标识管理办法》公开征求意见

Вас найдет камера, опознает ИИ, а штраф придет на Госуслуги.

Ordinary mergers and acquisitions are unexpectedly becoming a convenient point of entry for extortionists: operators of the Akira

The post Akira Exploits M&A: Ransomware Infiltrates Parent Orgs via Unpatched SonicWall Devices appeared first on Penetration Testing Tools.

The FBI has reported a surge in fraudulent schemes involving the takeover of financial accounts and warned that

The post FBI Warns of Surge in AI-Driven Account Takeover Fraud Ahead of Holidays appeared first on Penetration Testing Tools.

A group of Members of the European Parliament has called for abandoning the internal use of Microsoft products

The post MEPs Demand EU Ban All Microsoft Products, Citing Digital Sovereignty Risk appeared first on Penetration Testing Tools.

Cybercriminals no longer need to coax ChatGPT or Claude Code into assisting with malware development or data-theft scripts.

The post Dark LLMs for Sale: WormGPT 4 & KawaiiGPT Automate Ransomware and Phishing Creation appeared first on Penetration Testing Tools.

Analysis of ICO records shows no surge in breaches during Q4 2024 with no seasonal spike in reported incidents

Op de Nationale Veteranenbegraafplaats Loenen heeft minister Brekelmans gisteren in een stemmige sfeer het Nationale Veteranenmonument onthuld: een hand waarmee de vingers de letter V vormen. Aanwezig in deze bosrijke omgeving waren onder anderen veteranen en hun families. 

19-летней москвичке грозит реальный срок за виртуальный рэкет.

A vulnerability marked as critical has been reported in Microsoft Azure App Gateway. This impacts an unknown function. The manipulation leads to stack-based buffer overflow. This vulnerability is referenced as CVE-2025-64657. Remote exploitation of the attack is possible. No exploit is available. This product is a managed service. It is not possible for users to maintain vulnerability countermeasures themselves.

A vulnerability classified as critical has been found in SourceCodester Company Website CMS 1.0. This vulnerability affects unknown code of the file /admin/index.php. This manipulation of the argument Username causes sql injection. This vulnerability is registered as CVE-2025-13561. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

A vulnerability classified as critical was found in D-Link DIR-852 1.00. This issue affects some unknown processing of the file /gena.cgi. Such manipulation of the argument service leads to command injection. This vulnerability only affects products that are no longer supported by the maintainer. This vulnerability is documented as CVE-2025-13562. The attack can be executed remotely. Additionally, an exploit exists.

A vulnerability, which was classified as critical, was found in SourceCodester Inventory Management System 1.0. The affected element is an unknown function of the file /model/user/resetPassword.php. Executing manipulation can lead to weak password recovery. This vulnerability appears as CVE-2025-13565. The attack may be performed from remote. In addition, an exploit is available.

A vulnerability, which was classified as critical, has been found in code-projects Library System 1.0. This affects an unknown function of the file /index.php of the component Login. The manipulation of the argument Username leads to sql injection. This vulnerability is documented as CVE-2025-13578. The attack can be initiated remotely. Additionally, an exploit exists.

A vulnerability identified as critical has been detected in Keycloak. Affected is an unknown function of the component LDAP User Federation Handler. This manipulation causes deserialization. This vulnerability is registered as CVE-2025-13467. The attack requires access to the local network. No exploit is available.