Aggregator

据报道，被逮捕的五名威胁者参与了该网站新版本的运营。

A vulnerability was found in TrendMakers Sight Bulb Pro. It has been classified as critical. This affects an unknown part of the component Service Port 16668. The manipulation leads to command injection. This vulnerability is uniquely identified as CVE-2025-6522. The attack needs to be done within the local network. There is no exploit available.

当前环境异常，需完成验证后方可继续访问。

随着工业4.0的深化推进，智能制造、数字工厂和自动化产线的加速落地，制造业正经历前所未有的数字化转型。然而，技术升级的同时，企业的网络攻击面也急剧扩大，安全威胁持续升级。从传统的工控系统漏洞到针对数字孪生的新型网络攻击，制造业的网络安全面临全新挑战。 嘶吼安全产业研究院基于《2025网络安全产业图谱》调研，通过对400+典型解决方案与案例的深度分析，从需求匹配度、实践成效、创新技术、应用价值等多维度展开综合评估。 调研分析发现，制造业网络安全呈现出三个新特征：首先是防护对象的变化，从保护单一设备转向保护整个智能制造业务流。其次是防御理念的升级，从被动响应转向预测性防护。最后是安全责任的延伸，从企业自身安全扩展到供应链生态安全。同时，值得注意的是，工业数字孪生技术的安全防护和制造工艺知识产权的保护，正成为行业新的关注焦点。 基于这些发现，我们将重点展示多个在汽车制造、电子代工、工业生产等领域，以及一些通用能力具有示范价值的优秀安全解决方案，为制造业数字化转型中的安全建设提供实践参考。 PS：解决方案展示排名不分先后，按企业简称首字母排序。 往期回顾： 2025中国网络安全「政务行业」优秀解决方案汇编 2025中国网络安全「金融行业」优秀解决方案汇编 2025中国网络安全「能源行业」优秀解决方案汇编

In this Help Net Security interview, Michal Tresner, CEO of ThreatMark, discusses how cybercriminals are weaponizing AI, automation, and social engineering to industrialize money mule operations. He looks at how these networks have changed and how behavioral intelligence is helping to catch fraud. Tresner also shares practical tips for CISOs trying to stop mule activity before it gets out of hand. How are cybercriminals using automation, AI, or social engineering to scale mule recruitment and … More →

The post Money mule networks evolve into hierarchical, business-like criminal enterprises appeared first on Help Net Security.

A vulnerability was found in TrendMakers Sight Bulb Pro and classified as problematic. Affected by this issue is some unknown functionality of the component AES Key Exchange. The manipulation leads to risky cryptographic algorithm. This vulnerability is handled as CVE-2025-6521. The attack can only be initiated within the local network. There is no exploit available.

冰淇淋到啦～

As tensions in the Middle East rise, hacktivist groups are coming out of the woodwork with their own agendas, leading to notable shifts in the hacktivist threat landscape.

A vulnerability has been found in TB-eye XRN-410SN, XRN-810SN, XRN-1610SN, PRN-4011N, HRX-421FN, HRX-821, HRX-1621, HRX-435FN, HRX-835, HRX-1635, XRN-425SFN, XRN-426S, XRN-820S, XRN-1620S, XRN-3210R, XRN-6410R and XRN-6410DR and classified as critical. Affected by this vulnerability is an unknown functionality of the component CGI Process. The manipulation leads to buffer overflow. This vulnerability is known as CVE-2025-41418. The attack can be launched remotely. There is no exploit available.

A vulnerability, which was classified as critical, was found in TB-eye XRN-410SN, XRN-810SN, XRN-1610SN, PRN-4011N, HRX-421FN, HRX-821, HRX-1621, HRX-435FN, HRX-835, HRX-1635, XRN-425SFN, XRN-426S, XRN-820S, XRN-1620S, XRN-3210R, XRN-6410R and XRN-6410DR. Affected is an unknown function. The manipulation leads to os command injection. This vulnerability is traded as CVE-2025-36529. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability, which was classified as critical, has been found in Intelbras InControl 2.21.60.9. This issue affects some unknown processing of the file /v1/operador/ of the component HTTP PUT Request Handler. The manipulation leads to permission issues. The identification of this vulnerability is CVE-2025-6765. The attack may be initiated remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.

Submit #599880 / VDB-314075

Submit #599873 / VDB-314075

文章讲述了作者Kuwguap开发AI渗透测试助手RAWPA的过程。最初因功能不足关闭AI模块后，通过社区反馈整合LOLBAS等工具，并开发基于真实渗透测试报告的Neural Pathway Methodology AI系统，实现个性化指导和持续学习。项目旨在帮助渗透测试人员解决问题并提升技能。

夏威夷航空遭网络攻击致部分系统受阻，飞行安全未受影响。已联系当局和专家调查，并聘请外部专家评估影响。官网称航班未受影响。该航空公司由阿拉斯加航空集团所有，双方网站均发布警告。FAA称安全无虞。攻击性质尚不明确。

文章探讨了Salesforce数据卫生的重要性及其对业务的影响。通过设置重复规则和验证规则，使用AI工具进行自动化清理，并定期监控和标准化数据格式，企业可以提升数据质量。这不仅节省时间，还能提高分析准确性。

Hawaiian Airlines, the tenth-largest commercial airline in the United States, is investigating a cyberattack that has disrupted access to some of its systems. [...]

A vulnerability classified as critical was found in Comet System T0510, T3510, T3511, T4511, T6640, T7511, T7611, P8510, P8552 and H3531 1.60. This vulnerability affects unknown code of the file /setupA.cfg of the component Web-based Management Interface. The manipulation leads to missing authentication. This vulnerability was named CVE-2025-6763. Access to the local network is required for this attack. Furthermore, there is an exploit available. It is recommended to apply restrictive firewalling. The vendor was contacted early about this disclosure but did not respond in any way.

Every time there’s a natural or manmade disaster that takes medical equipment offline, cuts connectivity to emergency services and loved ones, or shuts down access to ATMs, network engineers are at the center of the heroic efforts required to restore availability and uptime. (Though, in truth, network engineers deal with chaos every day.) The network is what keeps businesses up and running, so it must be resilient. However, several factors contribute to the complexity of … More →

The post Managing through chaos to secure networks appeared first on Help Net Security.

Submit #599848 / VDB-314074