Aggregator

网络攻防既是技术的对抗，也是脑洞的较量。在上篇为大家梳理总结了 2024年出现的一些比较新颖的、有趣的、甚至有点奇葩的一些网络攻击新途径与新方法，这篇继续分享各种脑洞大开的新攻击方式，供读者参考。四、

Cloud security researchers have uncovered alarming trends in identity compromises within Amazon Web Services (AWS) environments. Among the most prolific threat actors is a group dubbed “EC2 Grouper,” known for exploiting compromised credentials to carry out sophisticated attacks using AWS tools. Over the past couple of years, EC2 Grouper has been active in dozens of […]

The post EC2 Grouper Hackers Using AWS Tools To Exploit Compromised Credentials appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Lumen reports that it has locked out the Salt Typhoon group from its network

Lumen reports that the Salt Typhoon hacking group, which targeted at least nine U.S. telecom firms, was locked out of its network. This week, a White House official confirmed that China-linked APT group Salt Typhoon has breached a ninth U.S. telecoms company as part of a cyberespionage campaign aimed at telco firms worldwide. China-linked APT group Salt Typhoon (also known as FamousSparrow and GhostEmperor) […]

悬镜安全持续引领SCA、SAST、IAST、RASP、SBOM情报、DevSecOps等关键技术领域。

悬镜安全持续引领SCA、SAST、IAST、RASP、SBOM情报、DevSecOps等关键技术领域。

悬镜安全持续引领SCA、SAST、IAST、RASP、SBOM情报、DevSecOps等关键技术领域。

亲爱的网络安全爱好者们：2025年1月18日和19日，DT杯网络安全攻击挑战赛 即将震撼登场！我们的靶场已全面开放，专注于 Web安全 和 内网渗透 两大核心方向。无论你是初出茅庐的新手，还是经验丰富

按：本文是付费栏目《生产力超频：OmniFocus 4 高效管理日程》的限时免费试读文章。这是现有栏目《用 OmniFocus 3 搭建任务管理系统》的后续版本，针对 OmniFocus 最新版撰写。

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /orders/view_order.php. The manipulation of the argument id leads to sql injection. This vulnerability is handled as CVE-2025-0173. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability has been found in code-projects Chat System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/deleteroom.php. The manipulation of the argument id leads to sql injection. This vulnerability is known as CVE-2025-0172. The attack can be launched remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as critical, was found in code-projects Chat System 1.0. Affected is an unknown function of the file /admin/deleteuser.php. The manipulation of the argument id leads to sql injection. This vulnerability is traded as CVE-2025-0171. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

Submit #473163 / VDB-289940

Submit #473154 / VDB-289939