Aggregator

Microsoft собирается ускорить появление термоядерных реакторов с помощью ИИ.

Strategic Plan Includes Human Risk Management Platform Expansion, IPO Preparation
Bryan Palma outlines his vision to grow KnowBe4 beyond security awareness training by investing in agentic AI, expanding email and behavioral tools and positioning the company for IPO readiness. He highlights Vista Equity's support and platform depth as key assets.

Also: Cyber IPOs and the Investment Climate, the Urgency of AI Explainability
In this week's update, ISMG editors unpacked Trump's teased "grand cyber plan" amid budget cuts to the Cybersecurity and Infrastructure Security Agency, key business takeaways from RSAC Conference 2025 and why explainability in artificial intelligence is becoming critical to trust and security.

Government Officials Sound 'Wake Up' Alarms
A rash of cyber incidents felt by British businesses add up to a wake-up call that cybersecurity is an absolute priority, top government officials warned during an annual conference hosted by the National Cyber Security Centre. The NCSC unveiled cyber resilience measures timed for the conference.

Partners Use Bedrock, SageMaker for Threat Detection, Response, Vital to Innovation
AWS is enabling cybersecurity firms to enhance detection, triage and response capabilities by embedding generative AI into services like Bedrock and SageMaker, while reinforcing its position as a partner-centric cloud security leader, said Managing Director Rohan Karmarkar.

As artificial intelligence (AI) tools gain mainstream traction for content creation, cybercriminals are capitalizing on the hype with a sophisticated new attack vector, fake AI platforms promising advanced video and image editing capabilities. These fraudulent sites, amplified through viral social media campaigns and Facebook groups with tens of thousands of views, lure users into uploading […]

The post Beware! Fake AI Video Generation Platforms Drop Stealer Malware on Your Computers appeared first on Cyber Security News.

Компания подтвердила факт взлома и предупредила об угрозе BEC-атак.

In a coordinated effort, Lumen Technologies’ Black Lotus Labs, the U.S. Department of Justice (DOJ), the Federal Bureau of Investigation (FBI), and the Dutch National Police have dismantled a sophisticated criminal proxy network that has operated since 2004. The botnet, tracked by Black Lotus Labs for over a year, infected thousands of Internet of Things […]

The post 20 Years old Proxy Botnet Network Dismantled That Exploits 1000 Unique Unpatched Devices Weekly appeared first on Cyber Security News.

Google has agreed to pay the U.S. state of Texas nearly $1.4 billion to settle two lawsuits that accused the company of tracking users' personal location and maintaining their facial recognition data without consent. The $1.375 billion payment dwarfs the fines the tech giant has paid to settle similar lawsuits brought by other U.S. states. In November 2022, it paid $391 million to a group of 40

Germany's Federal Criminal Police Office (aka Bundeskriminalamt or BKA) has seized the online infrastructure and shutdown linked to the eXch cryptocurrency exchange over allegations of money laundering and operating a criminal trading platform. The operation was carried out on April 30, 2025, authorities said, adding they also confiscated 8 terabytes worth of data and cryptocurrency assets

A vulnerability classified as critical was found in projectworlds Online Examination System 1.0. Affected by this vulnerability is an unknown functionality of the file /inser_doc_process.php. The manipulation of the argument Doc_ID leads to sql injection. This vulnerability is known as CVE-2025-4034. The attack can be launched remotely. Furthermore, there is an exploit available.

A vulnerability was found in 201206030 Novel 3.5.0 and classified as critical. This issue affects the function updateBookChapter of the file src/main/java/io/github/xxyopen/novel/controller/author/AuthorController.java of the component Chapter Handler. The manipulation leads to improper access controls. The identification of this vulnerability is CVE-2025-4036. The attack may be initiated remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability classified as critical has been found in Proofpoint Enterprise Protection. This affects an unknown part of the component SMIME Attachment Handler. The manipulation leads to improper authentication. This vulnerability is uniquely identified as CVE-2024-10635. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability classified as problematic was found in Fortra GoAnywhere MFT up to 7.7.1. This vulnerability affects unknown code of the component Email Handler. The manipulation leads to cross site scripting. This vulnerability was named CVE-2024-11922. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in Fortra GoAnywhere up to 7.7. This issue affects some unknown processing. The manipulation leads to information exposure through error message. The identification of this vulnerability is CVE-2025-0049. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in snowflakedb libsnowflakeclient up to 2.1.x and classified as problematic. This vulnerability affects unknown code of the component HTTP Response Handler. The manipulation leads to improper following of specification by caller. This vulnerability was named CVE-2025-46330. The attack needs to be approached locally. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in snowflakedb libsnowflakeclient up to 2.1.x and classified as problematic. This issue affects some unknown processing of the component Logging Level Handler. The manipulation leads to sensitive information in log files. The identification of this vulnerability is CVE-2025-46329. An attack has to be approached locally. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in advplyr audiobookshelf up to 2.20.x. It has been classified as problematic. Affected is an unknown function of the file /api/upload of the component Error Message Handler. The manipulation of the argument libraryId leads to cross site scripting. This vulnerability is traded as CVE-2025-46338. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in n8n-io n8n up to 1.89.x. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Attachments View Endpoint. The manipulation leads to cross site scripting. This vulnerability is known as CVE-2025-46343. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in code-projects Train Ticket Reservation System 1.0. It has been declared as critical. Affected by this vulnerability is the function Reservation of the component Ticket Reservation. The manipulation of the argument Name leads to stack-based buffer overflow. This vulnerability is known as CVE-2025-4038. Attacking locally is a requirement. Furthermore, there is an exploit available.