Aggregator

大脑结构在 9、32、66 和 83 岁时经历重大变化

Solidot
3 weeks 6 days ago
根据发表在《Nature Communications》期刊上的一项研究，剑桥大学团队利用 MRI diffusion scans 数据集对比了年龄在 0-90 岁之间的 3802 个人的大脑，发现在人一生中大脑结构会经历四个转折点五个阶段。这四个转折点主要发生在 9 岁、32 岁、66 岁和 83 岁时。9 岁是儿童期，32 岁是进入长达 30 年的成年期的开始，66 岁是大脑结构进入早期衰老的开始，83 岁是晚期衰老的开始。

Morphisec warns StealC V2 malware spread through weaponized blender files

Security Affairs
3 weeks 6 days ago
StealC V2 spread via malicious Blender files on 3D model sites like CGTrader, abusing Blender’s ability to run hidden Python scripts. Cybersecurity firm Morphisec reported that Russian threat actors are spreading StealC V2 infostealer via weaponized Blender files uploaded to 3D model marketplaces like CGTrader. The malware abuses Blender’s ability to run Python scripts for automation […]
Pierluigi Paganini

俄罗斯APT组织Gamaredon和朝鲜Lazarus疑似存在网络资产共用情况

黑鸟
3 weeks 6 days ago
Gamaredon 是自 2013 年起活跃的俄高级持续性威胁（APT）组织图1，核心聚焦网络间谍活动，相关报告可见乌克兰披露俄罗斯APT组织人员信息与通话录音 Lazarus 是 2009 年起活跃的朝鲜全方面威胁行为体图2，初期以网络间谍活动和破坏性攻击为主，后转向经济利益导向攻击以筹措资金。 Gamaredon 以窃密为业，Lazarus 则专事窃取，二者最终均服务于各自政府的战略利益。 就在莫斯科与平壤宣布开通新直飞航线的次日，安全团队发现了 Gamaredon 与 Lazarus 两大 APT 组织可能存在协作的迹象。 2025 年 7 月 24 日，团队通过已知 Telegram（电报）和 Telegraph（电报文稿平台）渠道追踪 Gamaredon 命令与控制（C2）服务器的系统，成功拦截了一个 IP 地址： 144[.]172[.]112[.]106 四天后，在例行检查中，团队发现该服务器正托管着一个经过混淆处理的 “InvisibleFerret” 恶意软件样本（SHA256 哈希值：128da948f7c3a6c052e782acfee503383bf05d953f3db5c603e4d386e2cf4b4d）—— 这款恶意软件正是 Lazarus 组织的标志性工具。 该载荷与 Lazarus 的工具集完全匹配，且通过与 “ContagiousInterview” 行动相同的服务器结构（URL 地址：http[://]144[.]172[.]112[.]106/payload/99/81）进行分发。而 “ContagiousInterview” 正是 Lazarus 此前针对求职者发起的钓鱼攻击行动，通过伪造招聘信息实施入侵。 尽管该 IP 地址有可能是代理服务器或 VPN 节点，但两大组织活动的时间关联性，再加上服务器托管模式的高度重合，表明他们存在基础设施复用的极大可能，且有中等置信度显示二者存在运营层面的协作。 目前尚不清楚是 Lazarus 借用了 Gamaredon 控制的服务器，还是双方共用同一客户实例，但这一高度重合的数字足迹，显然绝非偶然。 图3为其他APT组织合作情况 报告链接： https://www.gendigital.com/blog/insights/research/apt-cyber-alliances-2025

The Emergence of GPT-4-Powered Ransomware and the Threat to IAM Systems

Security Boulevard
3 weeks 6 days ago

The cybersecurity landscape is undergoing a profound transformation. Traditional malware, characterized by static code and predictable behaviors, is being eclipsed by a new breed of threats powered by advanced artificial intelligence. A notable example is the emergence of MalTerminal, a malware leveraging OpenAI’s GPT-4 to generate ransomware and reverse shells in real-time. This development marks..

The post The Emergence of GPT-4-Powered Ransomware and the Threat to IAM Systems appeared first on Security Boulevard.

Yashasvi Sharma

CVE-2022-2679 | SourceCodester Interview Management System 1.0 /viewReport.php ID sql injection

Vuldb Updates
3 weeks 6 days ago
A vulnerability was found in SourceCodester Interview Management System 1.0. It has been declared as critical. Affected is an unknown function of the file /viewReport.php. Executing manipulation of the argument ID with the input (UPDATEXML(9729,CONCAT(0x2e,0x716b707071,(SELECT (ELT(9729=9729,1))),0x7162766a71),7319)) can lead to sql injection. This vulnerability is handled as CVE-2022-2679. The attack can be executed remotely. Additionally, an exploit exists.
vuldb.com

CVE-2022-2685 | SourceCodester Interview Management System 1.0 /addQuestion.php question cross site scripting

Vuldb Updates
3 weeks 6 days ago
A vulnerability described as problematic has been identified in SourceCodester Interview Management System 1.0. Impacted is an unknown function of the file /addQuestion.php. Executing manipulation of the argument question with the input <script>alert(1)</script> can lead to cross site scripting. This vulnerability is tracked as CVE-2022-2685. The attack can be launched remotely. Moreover, an exploit is present.
vuldb.com

CVE-2022-38260 | janobe Interview Management System 1.0 delete.php?action=questiondelete ID sql injection

Vuldb Updates
3 weeks 6 days ago
A vulnerability labeled as critical has been found in janobe Interview Management System 1.0. This vulnerability affects unknown code of the file /interview/delete.php?action=questiondelete. The manipulation of the argument ID results in sql injection. This vulnerability is cataloged as CVE-2022-38260. The attack may be launched remotely. There is no exploit available.
vuldb.com

CVE-2022-38576 | janobe Interview Management System 1.0 delete.php?action=deletecand ID sql injection

Vuldb Updates
3 weeks 6 days ago
A vulnerability was found in janobe Interview Management System 1.0. It has been classified as critical. This issue affects some unknown processing of the file /interview/delete.php?action=deletecand. The manipulation of the argument ID leads to sql injection. This vulnerability is documented as CVE-2022-38576. The attack can be initiated remotely. There is not any exploit available.
vuldb.com

CVE-2024-45310 | opencontainers runc up to 1.1.13/1.2.0-rc2 os.MkdirAll race condition (Nessus ID 208965)

Vuldb Updates
3 weeks 6 days ago
A vulnerability classified as problematic has been found in opencontainers runc up to 1.1.13/1.2.0-rc2. This impacts the function os.MkdirAll. This manipulation causes race condition enabling link following. This vulnerability appears as CVE-2024-45310. The attack requires local access. There is no available exploit. It is recommended to upgrade the affected component.
vuldb.com

CVE-2024-36625 | Zulip 8.3 ui_util.ts replace_emoji_with_text cross site scripting

Vuldb Updates
3 weeks 6 days ago
A vulnerability classified as problematic has been found in Zulip 8.3. The impacted element is the function replace_emoji_with_text of the file ui_util.ts. Performing manipulation results in cross site scripting. This vulnerability is known as CVE-2024-36625. Remote exploitation of the attack is possible. No exploit is available. It is suggested to install a patch to address this issue.
vuldb.com

KawaiiGPT – New Black-Hat AI Tool Used by Hackers to Launch Cyberattacks

Cyber Security News
3 weeks 6 days ago

KawaiiGPT, a free malicious large language model (LLM) first spotted in July 2025 and now at version 2.5, empowers novice cybercriminals with tools for phishing emails, ransomware notes, and attack scripts, drastically lowering the entry barrier for cybercrime. Unlike paid rivals like WormGPT 4, which charges $50 monthly for similar capabilities, KawaiiGPT’s open-source availability on […]

The post KawaiiGPT – New Black-Hat AI Tool Used by Hackers to Launch Cyberattacks appeared first on Cyber Security News.

Guru Baran

Tor Project is rolling out Counter Galois Onion encryption

Help Net Security
3 weeks 6 days ago

People who rely on Tor expect their traffic to move through the network without giving away who they are. That trust depends on the strength of the encryption that protects each hop. Tor developers are preparing a major upgrade called Counter Galois Onion, or CGO, which replaces the long-standing relay encryption method used across the network. Why Tor is changing how relays handle encryption The older tor1 relay encryption scheme has been in use for … More →

The post Tor Project is rolling out Counter Galois Onion encryption appeared first on Help Net Security.

Sinisa Markovic

Managed ad