Aggregator

Threat actors using the aliases PescobarLegado and NyxarGroup claim to be selling internal access and employee data allegedly belonging to ContactMaster BPO, described as a strategic partner of Claro Móvil Colombia.

欧洲刑警组织披露，他们黑进了被网络犯罪分子使用的 VPN 服务“First VPN”，访问了用户数据库，识别了数千用户身份。First VPN 的网站已经显示被执法部门扣押的信息，它过去曾在俄语网络犯罪论坛上打广告，宣称能隐藏用户的 IP 地址，加密所有通信，不记录任何日志。它还声称将拒绝与司法机关合作，其服务不受任何司法管辖，且不会存储任何用户数据。First VPN 的活动始于 2014 年，在 27 个国家/地区提供了 32 个出口节点服务器。至少有 25 个勒索软件组织利用了其基础设施进行网络侦察和入侵。警方搜查了该服务管理员在乌克兰的住所，拆除了 33 台服务器。

Hackers compromised FBI Chief Kash Patel’s clothing store in a ClickFix attack that tricked macOS users into installing infostealer malware.

Hackread проверил продажу 340 млн записей OnlyFans.

AI tools are becoming part of everyday work in organizations, creating new security and oversight requirements as usage grows. To address that, Anthropic introduced 28 integrations with security and compliance tools that allow IT and security teams to manage Claude in the same way they manage other applications in their environments. The integrations are powered by the Claude Compliance API, which gives enterprise teams programmatic access to two types of data. The first category involves … More →

The post Anthropic adds 28 security and compliance integrations for Claude appeared first on Help Net Security.

A threat actor using the alias henrymartin claims to have leaked a database allegedly belonging to La Redoute, a major French multichannel retailer specializing in ready-to-wear apparel and home decor.

她在生前曾经告诉过我：“好日子我是等不到了，你们是会看到的。”

通过AI纯黑盒挖到通用产品 RCE 0day漏洞 by ourren

更多最新文章，请访问SecWiki

A threat actor using the alias yeblan claims to be selling private customer data from an unnamed AI chatting platform, offered in a structured format containing user and customer emails, the last four digits of payment cards, and subscription IDs.

当你以为域前置技术已经被各大 CDN 厂商彻底封堵时，一种更隐蔽、更危险的规避技术正在悄然兴起。

Площадка остановила торги, но вернуть доверие будет куда сложнее.

A vulnerability categorized as critical has been discovered in Soroush IM Desktop App 0.17.0. This issue affects some unknown processing. Such manipulation leads to authentication bypass by spoofing. This vulnerability is traded as CVE-2018-25361. An attack has to be approached locally. Furthermore, there is an exploit available.

A vulnerability was found in benoitc hackney up to 4.0.0. It has been rated as problematic. This vulnerability affects unknown code. This manipulation causes interpretation conflict. This vulnerability appears as CVE-2026-47076. The attack requires local access. There is no available exploit. Upgrading the affected component is advised.

A vulnerability was found in Apache Syncope up to 3.0.16/4.0.5/4.1.0. It has been declared as problematic. This affects an unknown part of the component JEXL Handler. The manipulation results in exposure of sensitive information through data queries. This vulnerability is reported as CVE-2026-42797. The attack can be launched remotely. No exploit exists. It is recommended to upgrade the affected component.

A vulnerability was found in Apache Syncope up to 3.0.16/4.0.5/4.1.0. It has been classified as problematic. Affected by this issue is some unknown functionality of the component Groovy Code Handler. The manipulation leads to improper isolation or compartmentalization. This vulnerability is documented as CVE-2026-42782. The attack can be initiated remotely. There is not any exploit available. Upgrading the affected component is recommended.

A vulnerability was found in Mozilla Firefox up to 151.0 on iOS and classified as problematic. Affected by this vulnerability is an unknown functionality of the component RTL Handler. Executing a manipulation can lead to improper restriction of rendered ui layers. This vulnerability is registered as CVE-2026-9078. It is possible to launch the attack remotely. No exploit is available. It is suggested to upgrade the affected component.

A vulnerability has been found in Stokedonit Notebook Pro 2.0 and classified as problematic. Affected is an unknown function. Performing a manipulation results in uncontrolled memory allocation. This vulnerability is cataloged as CVE-2018-25378. The attack must be initiated from a local position. Furthermore, there is an exploit available.

A vulnerability, which was classified as critical, was found in SocuSoft 3GP Photo Slideshow 8.05. This impacts an unknown function. Such manipulation leads to buffer overflow. This vulnerability is listed as CVE-2018-25376. The attack must be carried out locally. In addition, an exploit is available.

A vulnerability, which was classified as critical, has been found in SocuSoft iPod Photo Slideshow 8.05. This affects an unknown function. This manipulation causes stack-based buffer overflow. This vulnerability is tracked as CVE-2018-25375. The attack is restricted to local execution. Moreover, an exploit is present.