Aggregator

Groen licht voor maken eigen defensie-satellieten

Defensie.nl - Nieuwsberichten
1 month ago
Defensie gaat eigen Nederlandse satellietcapaciteit ontwikkelen. Tot nu toe maakte de organisatie gebruik van door andere partijen geleverde technologie. Zelf het informatiesysteem creëren maakt de krijgsmacht minder afhankelijk. Defensie kan dan eigen satellieten inzetten om inlichtingen te verzamelen. Staatssecretaris Gijs Tuinman maakte dit maandag bekend. Gisteren verdiepte hij zich onder meer in satellieten in Londen. Dat gebeurde tijdens de Defence and Security Equipment International (DSEI).

Meta Verified Scam Ads on Facebook Steal User Account Details

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
1 month ago

Content creators and small businesses are facing a sophisticated new threat targeting their Facebook accounts through deceptive advertisements promising free Meta verification badges. A new malvertising campaign is targeting Facebook users with malicious ads that promise to unlock Meta’s coveted blue verification tick through a seemingly legitimate browser extension. These ads, accompanied by instructional videos, […]

The post Meta Verified Scam Ads on Facebook Steal User Account Details appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Mayura Kathir

How can I trace back an email?

不安全
1 month ago
这是一个开放的黑客社区，旨在帮助新手成长为资深黑客，提供问答和学习资源，并通过Discord平台促进交流与合作。

Kerberoasting

不安全
1 month ago
/r/netsec 是一个由社区管理的技术信息安全内容聚合平台，旨在为安全从业者、学生、研究人员和黑客提供有价值的信息资源。

Kerberoasting

不安全
1 month ago
Kerberoasting是一种利用微软Active Directory中旧加密技术（如RC4）的漏洞，允许攻击者通过获取加密票证破解服务账户密码，进而实现横向移动攻击。尽管微软提供了缓解建议，但未强制关闭不安全选项，导致该漏洞仍被用于实际攻击。

Unlock Cybersecurity Transformation with Microsoft ECIF and GuidePoint Security

不安全
1 month ago
微软企业客户投资基金（ECIF）旨在通过提供资金支持，帮助组织克服安全改进中的预算和执行障碍。该基金常用于安全评估、概念验证、部署支持、威胁狩猎和变更管理等关键领域。微软认证合作伙伴可协助申请和实施，确保资源有效转化为实际安全成果。

Auth0 Pricing Explained (And Why Startups Call It a Growth Penalty)

不安全
1 month ago
文章探讨了身份平台Auth0的定价模型及其对初创企业的影响。尽管其初期方便易用且加速产品上市，但随着用户增长和功能需求增加，其基于MAU的定价结构可能导致不可预测的成本激增和"增长惩罚"。文章分析了其价格悬崖、SSO连接限制及企业合同的高昂成本，并提供了替代方案和缓解策略。

Apple CarPlay Vulnerability Allows Remote Code Execution to Gain Root Access

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
1 month ago

A newly disclosed vulnerability in Apple’s CarPlay ecosystem enables remote code execution with root privileges, posing a serious risk to connected vehicles. Discovered by the Oligo Security Research team and tracked as CVE-2025-24132, the flaw resides within the AirPlay protocol implementation used by CarPlay systems. CVE ID Affected Components Versions Impacted CVE-2025-24132 AirPlay Audio SDK < 2.7.1 […]

The post Apple CarPlay Vulnerability Allows Remote Code Execution to Gain Root Access appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Divya

CVE-2025-10218 | lostvip-com ruoyi-go 2.1 Background Management Page SysRoleDao.go SelectListPage sortName sql injection

VulDB Recent Entries
1 month ago
A vulnerability, which was classified as critical, has been found in lostvip-com ruoyi-go 2.1. This affects the function SelectListPage of the file modules/system/dao/SysRoleDao.go of the component Background Management Page. This manipulation of the argument sortName causes sql injection. This vulnerability is registered as CVE-2025-10218. Remote exploitation of the attack is possible. Furthermore, an exploit is available. The vendor was contacted early about this disclosure but did not respond in any way.
vuldb.com

Managed ad