Aggregator

Submit #605895 / VDB-314493

Submit #605894 / VDB-314492

Submit #605892 / VDB-314491

Cyber-attacks can be a costly business, yet many firms aren’t taking out cyber insurance, according to the UK government’s Breaches Survey. Why is this?

The post Why Are Some Businesses Still Shunning Cyber Insurance? appeared first on Sygnia.

随着新型电力系统建设和智慧水利工程推进，电力与水利行业正面临前所未有的网络安全挑战。数字化、智能化转型在提升运营效率的同时，也暴露出新的安全脆弱性。新能源场站的光伏逆变器以及风电系统正成为勒索软件的新目标，电力现货交易平台面临数据篡改风险，水利枢纽闸门控制系统遭遇GPS欺骗攻击等新型威胁层出不穷。 嘶吼安全产业研究院基于《2025网络安全产业图谱》调研，通过对400+典型解决方案与案例的深度分析，从需求匹配度、实践成效、创新技术、应用价值等多维度展开综合评估。 调研分析发现，当前电力（水利）行业网络安全呈现三大新特征：一是防护范围从核心生产系统扩展到新能源场站、电力交易平台等新兴业务场景。二是防御重点转向保障电力调度指令和水文数据的真实性与完整性。三是技术架构升级为融合5G专网、密码技术和AI分析的协同防护体系。这些变化均是数字化转型带来的新型风险所致。 基于这些发现，我们将重点展示几个具有代表性的电力（水利）行业优秀安全解决方案，为电力（水利）行业的安全建设提供可借鉴的实践经验。 PS：解决方案展示排名不分先后，按企业简称首字母排序。 往期回顾： 2025中国网络安全「政务行业」优秀解决方案汇编 2025中国网络安全「金融行业」优秀解决方案汇编 2025中国网络安全「能源行业」优秀解决方案汇编 2025中国网络安全「制造行业」优秀解决方案汇编

A vulnerability, which was classified as critical, was found in TOTOLINK A3002RU 3.0.0-B20230809.1615. Affected is an unknown function of the file /boafrm/formParentControl of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. This vulnerability is traded as CVE-2025-6953. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

In this Help Net Security interview, Tammy Hornsby-Fink, CISO at Federal Reserve System, shares how the Fed approaches cyber risk with a scenario-based, intelligence-driven strategy. She explains how the Fed assesses potential disruptions to financial stability and addresses third-party and cloud service risks. Hornsby-Fink also discusses how federal collaboration supports managing systemic threats and strengthens operational resilience. As CISO of the Federal Reserve System, how do you assess and prioritize national-scale cyber threats that could … More →

The post Federal Reserve System CISO on aligning cyber risk management with transparency, trust appeared first on Help Net Security.

Europol and international law enforcement have dismantled a sprawling cryptocurrency investment fraud network that allegedly defrauded more than 5,000 victims globally, laundering at least €460 million ($540 million) in illicit funds. The arrests, carried out on June 25, 2025, mark one of the largest crackdowns on crypto fraud in European history. Coordinated International Effort The […]

The post Europol Dismantles Massive Crypto Investment Scam Targeting 5000+ victims Worldwide appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Submit #605874 / VDB-314490

A vulnerability, which was classified as problematic, has been found in Open5GS up to 2.7.5. This issue affects the function amf_state_operational of the file src/amf/amf-sm.c of the component AMF Service. The manipulation leads to reachable assertion. The identification of this vulnerability is CVE-2025-6952. It is possible to launch the attack on the local host. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability classified as problematic was found in SAFECAM X300 up to 20250611. This vulnerability affects unknown code of the component FTP Service. The manipulation leads to use of default credentials. This vulnerability was named CVE-2025-6951. Access to the local network is required for this attack to succeed. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.

Submit #605312 / VDB-314489

Google 与 Commonwealth Fusion Systems 签署协议，购买 200 MW 的未来聚变能源。可控核聚变被认为能提供源源不断的清洁能源，但利用可控核聚变发电尚未成为现实，Commonwealth 计划于 2030 年代初在弗吉尼亚州完成聚变能核电站的建造。Commonwealth 的聚变能是基于托卡马克装置。托卡马克（Tokamak）是一种利用磁约束来实现磁约束聚变的环性容器，其中央是一个环形的真空室，内部气体在极端高温和高压下变成等离子体。在这笔交易中 Google 同时还向 Commonwealth 进行了投资，但它没有披露投资金额，只是表示旨在帮助推动核聚变的商业化。

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert following the addition of a critical Citrix NetScaler vulnerability—CVE-2025-6543—to its Known Exploited Vulnerabilities (KEV) Catalog, citing evidence of active exploitation in the wild. Vulnerability Details CVE-2025-6543 is a buffer overflow vulnerability affecting Citrix NetScaler ADC and NetScaler Gateway appliances when configured as a Gateway […]

The post CISA Issues Alert on Actively Exploited Citrix NetScaler ADC and Gateway Vulnerability appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Submit #595454 / VDB-314488

In a recent case tracked by Flashpoint, a finance worker at a global firm joined a video call that seemed normal. By the end of it, $25 million was gone. Everyone on the call except the employee was a deepfake. Criminals had used AI-powered cybercrime tactics to impersonate executives convincingly enough to get the payment approved. The top observed malicious LLMs mentioned on Telegram (Source: Flashpoint) Threat actors are building LLMs specifically for fraud and … More →

The post How cybercriminals are weaponizing AI and what CISOs should do about it appeared first on Help Net Security.

Google has issued an urgent security update for its Chrome browser, addressing a critical zero-day vulnerability that is being actively exploited by attackers. The flaw, tracked as CVE-2025-6554, is a type confusion vulnerability in Chrome’s V8 JavaScript engine, which underpins the browser’s ability to process web content across Windows, macOS, and Linux platforms. The vulnerability was discovered by […]

The post Chrome 0-Day Flaw Exploited in the Wild to Execute Arbitrary Code appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A vulnerability was found in FastBook Plugin up to 1.1 on WordPress. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting. This vulnerability is known as CVE-2025-25173. The attack can be launched remotely. There is no exploit available.

A vulnerability was found in snstheme MBStore Plugin up to 2.3 on WordPress and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to improper control of filename for include/require statement in php program ('php remote file inclusion'). This vulnerability is handled as CVE-2025-28947. The attack may be launched remotely. There is no exploit available.

A vulnerability was found in BZOTheme PrintXtore Plugin up to 1.7.5 on WordPress. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to improper control of filename for include/require statement in php program ('php remote file inclusion'). This vulnerability was named CVE-2025-28946. The attack can be initiated remotely. There is no exploit available.