Aggregator

OpenAI调整GPT-5系列模型API速率，各层级TPM翻倍。例如Tier 1由30K升至500K TPM。GPT-5-mini Tier 1也由200K升至500K TPM。开发者可登录平台查看最新层级和速率限制。

A vulnerability identified as problematic has been detected in Express XSS Sanitizer up to 2.0.0 on Node.js. Affected by this issue is some unknown functionality in the library lib/sanitize.js of the component JSON Request Body Handler. The manipulation leads to uncontrolled recursion. This vulnerability is referenced as CVE-2025-59364. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability categorized as problematic has been discovered in libexpat up to 2.7.1. Affected by this vulnerability is an unknown functionality. Executing manipulation can lead to allocation of resources. The identification of this vulnerability is CVE-2025-59375. The attack may be launched remotely. There is no exploit available. It is advisable to upgrade the affected component.

A vulnerability was found in Gotac Statistical Database System up to 1.0.0. It has been rated as critical. Affected is an unknown function. Performing manipulation results in missing authentication. This vulnerability was named CVE-2025-10452. The attack may be initiated remotely. There is no available exploit. Upgrading the affected component is advised.

A vulnerability was found in huggingface transformers up to 4.52.x. It has been declared as problematic. This impacts the function normalize_numbers. Such manipulation leads to inefficient regular expression complexity. This vulnerability is uniquely identified as CVE-2025-6051. The attack can be launched remotely. No exploit exists. It is recommended to upgrade the affected component.

UK ICO reports students caused over half of school data breaches, showing kids are shaping cybersecurity in unexpected ways. The UK Information Commissioner’s Office (ICO), students were responsible for most of the data breaches suffered by the schools in the country. The U.K.’s independent regulator for data protection and information rights also reported that nearly […]

英国 ICO 报告称学生引发超半数学校数据泄露事件，部分青少年因好奇或报复等原因参与网络犯罪。

Panama’s Ministry of Economy and Finance disclosed a security breach impacting a computer in its infrastructure. Panama’s Ministry of Economy and Finance (MEF) announced that threat actors likely compromised one of its computers. The Ministry immediately activated its security protocols to contain the threat. Panama’s Ministry pointed out that critical systems vital to operations remain […]

巴拿马经济和财政部遭遇网络攻击，黑客组织INC声称窃取1.5TB数据，包括财务文件和内部邮件。尽管关键系统未受影响，但该部门已启动安全措施应对威胁。

Уже через месяц миллионы компьютеров останутся беззащитными перед натиском цифровых угроз.

The official standards for 6G are set to be announced by the end of 2029. While the industry is moving towards consensus around how the 6G network will be built, it also needs to anticipate how it will be compromised and make sure to build it with a secure-by-design approach. Telecom industry leaders need to anticipate novel vulnerabilities and attacks specific for 6G. Unlike the previous generation of wireless, 6G will expand to even more … More →

The post What could a secure 6G network look like? appeared first on Help Net Security.

Kubernetes C# Client: improper certificate validation in custom CA mode may lead to man-in-the-middle attacks

A vulnerability, which was classified as problematic, was found in Palo Alto Cortex XDR Microsoft 365 Defender Pack up to 11.0.2-132. This impacts an unknown function of the component Application Log. Executing manipulation can lead to sensitive information in log files. The identification of this vulnerability is CVE-2025-4234. The attack can only be executed locally. There is no exploit available. You should upgrade the affected component.

概述2025年以来，全球DDoS攻击的带宽峰值不断刷新历史纪录，从年初的3.12 Tbps一路飙升至近日惊人的

在 Hot Chips 2025 上，AMD 工程师介绍了该公司最新一代显卡 RX 9000 系列使用的 RDNA4 GPU 架构。RDNA4 GPU 大幅改进了光线追踪和机器学习效率，让中端显卡 RX 9070 以更小的面积、更低的功耗、更少的带宽实现了与上一代旗舰显卡 RX 7900XT 相似的光栅性能，以及更高的光线追踪性能。AMD GPU 的硬件视频编解码通常落后于竞争对手，RDNA4 的媒体引擎（Media Engine）提供了更快的解码速度，改进了 H.265、H.265 和 AV1 的视频编码质量，尤其是在低延迟编码方面，串流能从中受益。显示引擎（Display Engine）引入了 Radeon Image Sharpening 过滤器，让专门的硬件锐化最终图像有助于改进功耗；显示引擎也改进了多显示器的待机功耗。标量单元(Scalar Unit)加入了一些浮点指令。RDNA4 的一大变化是 L2 缓存从 RDNA2 的 4MB 和 RDNA3 的 6MB 增加到了 8MB，AMD 称光线追踪等工作负荷能受益于更大的 L2 缓存。

A vulnerability categorized as critical has been discovered in J Reactions up to 1.8.1 on Joomla. The affected element is an unknown function of the file langset.php. Executing manipulation of the argument comPath can lead to code injection. This vulnerability is tracked as CVE-2007-4244. The attack can be launched remotely. Moreover, an exploit is present.

A vulnerability labeled as critical has been found in Japanese PHP Gallery Hosting. Affected by this vulnerability is an unknown functionality of the file upload/upload.php of the component File Upload. Executing manipulation of the argument ServerPath can lead to code injection. This vulnerability is registered as CVE-2007-5733. It is possible to launch the attack remotely. Furthermore, an exploit is available.

A vulnerability categorized as problematic has been discovered in IT!CMS. The impacted element is an unknown function of the file lang-en.php. Such manipulation of the argument wndtitle leads to basic cross site scripting. This vulnerability is uniquely identified as CVE-2007-4115. The attack can be launched remotely. Moreover, an exploit is present.

A vulnerability identified as problematic has been detected in IT!CMS. This affects an unknown function of the file titletext-ed.php. Performing manipulation of the argument wndtitle results in basic cross site scripting. This vulnerability was named CVE-2007-4115. The attack may be initiated remotely. In addition, an exploit is available.