Aggregator

The founders of Indian cryptocurrency exchange CoinDCX said no customer funds were affected in a more than $40 million theft from reserves.

Компания выпустила бесплатный декриптор для жертв шифровальщика.

Threat actors are increasingly adopting AI-powered cloaking services to obfuscate phishing domains, counterfeit e-commerce sites, and malware distribution endpoints from automated security scanners. This technique, known as cloaking, involves dynamically serving innocuous “white pages” to detection mechanisms while directing legitimate users to malicious “black pages.” Leveraging advancements in JavaScript fingerprinting, machine learning algorithms, and behavioral […]

The post AI-Powered Cloaking Tools Help Threat Actors Hide Malicious Domains from Security Scans appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

W3b0s1nt (WebOSINT): A Python script for passive Domain Intelligence gathering

New samples of DCHSpy, a spyware implant linked to Iranian APT group MuddyWater, were detected by Lookout one week after the start of the Israel-Iran conflict

The China-linked cyber espionage group tracked as APT41 has been attributed to a new campaign targeting government IT services in the African region. "The attackers used hardcoded names of internal services, IP addresses, and proxy servers embedded within their malware," Kaspersky researchers Denis Kulik and Daniil Pogorelov said. "One of the C2s [command-and-control servers] was a captive

У вас Android и карта под рукой? Тогда вы идеальная жертва новой схемы.

Fake npm website used in phishing attack to steal maintainer token, leading to malware in popular JavaScript packages like eslint-config-prettier.

Arch Linux 项目发出安全警告，7 月 16 日晚 8 点左右（UTC+2）一个恶意软件包上传到了 Arch User Repository(AUR)，几个小时后同一位用户又上传了两个恶意包，这些软件包会安装来自同一个 GitHub 库的脚本，该脚本被识别为 RAT（远程访问木马）。三个恶意软件包都与 Firefox 或其分支相关： librewolf-fix-bin，firefox-patch-bin，zen-browser-patched-bin。开发者建议如果安装了这些恶意软件包，立即清除并采取安全防御措施。Reddit 用户随后报告了更多的恶意 AUR 包，相关软件包在被举报之后迅速移除了。

ExpressVPN has fixed a flaw in its Windows client that caused Remote Desktop Protocol (RDP) traffic to bypass the virtual private network (VPN) tunnel, exposing the users' real IP addresses. [...]

Traditional security testing tools can’t keep pace with modern threats—or prove which vulnerabilities truly matter. Discover how Adversarial Exposure Validation (AEV) bridges the gap by continuously simulating real-world attacks to reveal exploitable exposures, prioritize risk, and empower smarter security decisions. Learn why AEV is the missing link in your CTEM strategy and how BreachLock is leading the way.

今日暂未更新资讯~
更多最新文章，请访问SecWiki

A vulnerability, which was classified as problematic, has been found in WP-Members Plugin up to 3.5.4.1 on WordPress. Affected by this issue is the function wpmem_login_link of the component Shortcode Handler. The manipulation leads to cross site scripting. This vulnerability is handled as CVE-2025-7495. The attack may be launched remotely. There is no exploit available.

A vulnerability classified as problematic was found in User Registration Plugin up to 4.2.4 on WordPress. Affected by this vulnerability is the function urcr_restrict of the component Shortcode Handler. The manipulation leads to cross site scripting. This vulnerability is known as CVE-2025-6831. The attack can be launched remotely. There is no exploit available.

A vulnerability classified as problematic has been found in SureForms Plugin up to 1.7.1 on WordPress. Affected is an unknown function. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2025-5921. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability was found in Ebook Store Plugin up to 5.8012 on WordPress. It has been rated as problematic. This issue affects some unknown processing of the component Order Details Handler. The manipulation leads to cross site scripting. The identification of this vulnerability is CVE-2025-7486. The attack may be initiated remotely. There is no exploit available.

A vulnerability was found in vcita CRM and Lead Management Plugin up to 2.7.5 on WordPress. It has been declared as problematic. This vulnerability affects unknown code. The manipulation of the argument Type leads to cross site scripting. This vulnerability was named CVE-2025-5240. The attack can be initiated remotely. There is no exploit available.

A vulnerability was found in Trendnet TPL-430AP 1.0. It has been classified as problematic. This affects an unknown part of the component Configuration File Handler. The manipulation of the argument USERLIMIT_GLOBAL leads to denial of service. This vulnerability is uniquely identified as CVE-2025-44651. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability was found in Linksys EA6350 2.1.2 and classified as critical. Affected by this issue is some unknown functionality of the component Configuration File Handler. The manipulation of the argument chroot_local_user leads to improper authorization. This vulnerability is handled as CVE-2025-44657. The attack needs to be done within the local network. There is no exploit available.

A vulnerability has been found in Sensaphone WEB600 Monitoring System up to 1.6.5.H and classified as problematic. Affected by this vulnerability is an unknown functionality of the component GET Handler. The manipulation of the argument g7200/g7300/g4601/g1F02 leads to cross site scripting. This vulnerability is known as CVE-2024-55040. The attack can be launched remotely. There is no exploit available.