Aggregator

解读NCorr-FP论文分析NCorr-FP方案的实现

Aqaba Special Economic Zone Authority Falls Victim to Qilin Ransomware

Hackers exploit a critical vulnerability, tracked as CVE-2025-5394 (CVSS score of 9.8), in the Alone WordPress theme to hijack sites. Threat actors are actively exploiting a critical flaw, tracked as CVE-2025-5394 (CVSS score of 9.8), in the “Alone – Charity Multipurpose Non-profit WordPress Theme” to compromise websites. On May 30th, 2025, security researcher Thái An […]

Устройство с 4G-модемом подключили к ATM-коммутатору для удалённого доступа.

英伟达宣布，自 2025 年 10 月起新 Game Ready 驱动更新将不再支持 Maxwell、Pascal 或 Volta GPU 架构。这意味着 GeForce GTX 1060 之类的旧显卡将不再获得针对新游戏进行优化的驱动版本。英伟达还表示将于 2026 年 10 月停止所有 Windows 10 驱动支持，比微软官方的 Windows 10 终止支持时间晚一年。此后如果 Windows 10 用户希望继续获得较新型号显卡的新驱动，他们需要升级到 Windows 11。英伟达表示会在 2028 年 10 月之前为 Maxwell、Pascal 和 Volta 系列显卡发布季度安全更新。

In a warning to foreign embassies in Moscow, Microsoft said a Russian state-backed hacking group known as Secret Blizzard or Turla has been using internet service providers for adversary-in-the-middle (AiTM) attacks.

Microsoft Threat Intelligence has uncovered a cyberespionage campaign by the Russian state actor we track as Secret Blizzard that has been ongoing since at least 2024, targeting embassies in Moscow using an adversary-in-the-middle (AiTM) position to deploy their custom ApolloShadow malware.

The post Frozen in transit: Secret Blizzard’s AiTM campaign against diplomats appeared first on Microsoft Security Blog.

Microsoft warns that a cyber-espionage group linked to Russia's Federal Security Service (FSB) is targeting diplomatic missions in Moscow using local internet service providers. [...]

Microsoft Threat Intelligence has uncovered a cyberespionage campaign by the Russian state actor we track as Secret Blizzard that has been ongoing since at least 2024, targeting embassies in Moscow using an adversary-in-the-middle (AiTM) position to deploy their custom ApolloShadow malware.

The post Frozen in transit: Secret Blizzard’s AiTM campaign against diplomats appeared first on Microsoft Security Blog.

A new Microsoft report finds that the long-running threat group has gained positions on state-aligned ISPs and Russian telecoms, while tricking foreign embassy staff to download custom malware.

The post Russia-affiliated Secret Blizzard conducting ongoing espionage against embassies in Moscow appeared first on CyberScoop.

An ongoing AitM campaign by the infamous Moscow-sponsored cyber-threat actor has widened its scope, dropping the dangerous ApolloShadow custom backdoor malware thanks to lawful intercept systems.

То, что вчера считалось неподъёмным даже для суперкомпьютеров, сегодня рассчитывается на ноутбуке.

网络空间测绘技术白皮书 by ourren

国家信息化发展报告（2024年） by ourren

白盒+LLM：操作类越权自动化检测实践 by ourren

白盒漏洞 AI 运营实践 by ourren

美国网络司令部集成各军种项目开展联合网络武器研发 by ourren

更多最新文章，请访问SecWiki

A vulnerability was found in Cisco Unified Intelligence Center 10.6(1). It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross-site request forgery. This vulnerability is traded as CVE-2015-0740. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability, which was classified as problematic, has been found in Cisco Unified Intelligence Center 10.0(1)/10.6(1). This issue affects some unknown processing. The manipulation leads to cross-site request forgery. The identification of this vulnerability is CVE-2015-4274. The attack may be initiated remotely. There is no exploit available.

A vulnerability was found in Cisco Unified Intelligence Center and classified as problematic. Affected by this issue is some unknown functionality of the component Web Interface. The manipulation as part of Parameter leads to cross site scripting. This vulnerability is handled as CVE-2017-12248. The attack may be launched remotely. There is no exploit available.

A vulnerability was found in Cisco Unified Intelligence Center. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to cross-site request forgery. The identification of this vulnerability is CVE-2017-12253. The attack may be initiated remotely. There is no exploit available.

A vulnerability classified as problematic has been found in Cisco Unified Intelligence Center. Affected is an unknown function of the component Web Interface. The manipulation as part of Parameter leads to cross site scripting (DOM-Based). This vulnerability is traded as CVE-2017-12254. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability was found in Cisco Prime Collaboration Deployment. It has been classified as critical. This affects an unknown part of the component Upgrade. The manipulation leads to improper authentication. This vulnerability is uniquely identified as CVE-2017-12337. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic has been found in Cisco VOS, UCM, IM, P, SME, UCCx and UIC. This affects an unknown part of the component Log File Handler. The manipulation as part of Connection Request leads to resource consumption. This vulnerability is uniquely identified as CVE-2017-6779. It is possible to initiate the attack remotely. There is no exploit available.