Aggregator

U.S. CISA adds Ivanti Connect Secure, Policy Secure, and ZTA Gateways flaw to its Kno

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Ivanti Connect Secure, Policy Secure, and ZTA Gateways flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added an Ivanti Connect Secure Vulnerability, tracked as CVE-2025-0282 (CVSS score: 9.0) to its Known Exploited Vulnerabilities (KEV) catalog. The vulnerability Ivanti impacted Ivanti Connect […]

Исправления до сих пор нет. Как обезопасить свой сайт?

A vulnerability was found in GLPI up to 0.72.1. It has been declared as critical. This vulnerability affects unknown code. The manipulation of the argument _predefined_fields leads to deserialization. This vulnerability was named CVE-2013-2225. The attack can be initiated remotely. Furthermore, there is an exploit available.

Vulnerable Windows drivers remain one of the most exploited methods attackers use to gain access

Японский хранитель времени потерял счёт своим секретам.

A court has ruled the EU Commission infringed an individual’s right to the protection of their personal data by transferring their details to the US

09/01/2025 ClamAVIoC Da oggi, il Fluss

ИИ видит всё, но зелёные купюры открывают слепые зоны.

A bad actor is using a Microsoft 365 test domain and a self-created distribution list to bypass traditional email protections and entice victims to hand over their PayPal account information in what Fortinet's CISO is calling a "phish-free" phishing campaign.

The post Fortinet CISO Details ‘Phish-Free’ Phishing Scheme Using PayPal appeared first on Security Boulevard.

A hacker is using Microsoft 365 test domains and distribution lists they create in a phishing ca

The United Nations' aviation agency has confirmed that hackers have compromised its systems, and a

关键词安全漏洞在广泛使用的内存数据库Redis里，发现了两个严重漏洞，这可能使数百万系统面临拒绝服务（DoS）攻击和远程代码执行（RCE）的风险。这些漏洞被标记为CVE - 2024 - 51741和

关键词恶意软件2024年发生了多起引人注目的网络攻击，像戴尔和TicketMaster这样的大公司也都成为了数据泄露和其他基础设施攻击的受害者。到2025年，这样的趋势还将持续下去。正所谓知己知彼百战

关键词网络攻击乌克兰网络联盟组织成员乌克兰黑客周二宣布，他们已经入侵俄罗斯互联网服务提供商 Nodex 的网络并在窃取敏感文件后清除了被黑系统。“位于圣彼得堡的俄罗斯互联网提供商 Nodex 被彻底洗