Aggregator

8月7日，ISC.AI 2025创新独角兽沙盒大赛巅峰对决圆满落下帷幕。

Cobalt 发布了《2025年CISO安全洞察报告》，揭示了当前企业在人工智能（AI）、第三方风险与内部威胁方面的核心安全挑战及应对策略。

当前环境出现异常，需完成验证后方可继续访问。

文章指出当前环境出现异常，需完成验证后才能继续访问。

Submit #622300 / VDB-319230

Submit #622299 / VDB-319229

Submit #622298 / VDB-319229

A vulnerability was found in libxml2 up to 2.14.5. It has been declared as problematic. This vulnerability affects the function xmlParseSGMLCatalog of the component xmlcatalog. The manipulation leads to uncontrolled recursion. This vulnerability was named CVE-2025-8732. Attacking locally is a requirement. Furthermore, there is an exploit available. The real existence of this vulnerability is still doubted at the moment. The code maintainer explains, that "[t]he issue can only be triggered with untrusted SGML catalogs and it makes absolutely no sense to use untrusted catalogs. I also doubt that anyone is still using SGML catalogs at all."

Submit #622285 / VDB-319228

A vulnerability was found in TRENDnet TI-G160i, TI-PG102i and TPL-430AP up to 20250724. It has been classified as critical. This affects an unknown part of the component SSH Service. The manipulation leads to use of default credentials. This vulnerability is uniquely identified as CVE-2025-8731. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.

美国国土安全部打击了Royal和BlackSuit勒索软件团伙，该团伙入侵数百家美国公司并获赎金3.7亿美元。该团伙最初为Quantum勒索软件，在2022年改名为Royal，并于2023年转为BlackSuit品牌。目前该团伙计划以Chaos品牌继续活动。

A vulnerability was found in Belkin F9K1009 and F9K1010 2.00.04/2.00.09 and classified as critical. Affected by this issue is some unknown functionality of the component Web Interface. The manipulation leads to hard-coded credentials. This vulnerability is handled as CVE-2025-8730. The attack may be launched remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.

Submit #621749 / VDB-319227

Submit #621763 / VDB-145464

A vulnerability has been found in MigoXLab LMeterX 1.2.0 and classified as critical. Affected by this vulnerability is the function process_cert_files of the file backend/service/upload_service.py. The manipulation of the argument task_id leads to path traversal. This vulnerability is known as CVE-2025-8729. The attack can be launched remotely. Furthermore, there is an exploit available. It is recommended to apply a patch to fix this issue.

Submit #621760 / VDB-319226

Submit #621748 / VDB-319226

Submit #621747 / VDB-319226

中国主要太阳能公司去年裁员近三分之一，五家头部企业共裁减约8.7万名员工。裁员源于产能过剩和需求低迷导致的价格战。全球太阳能电池板产量是使用量的两倍，大部分由中国企业制造。

数据显示，中国主要太阳能公司去年裁员近三分之一。隆基绿能、天合光能、晶科能源、晶澳太阳能和通威集团去年共计裁员约 8.7 万人，平均占员工总数的 31%。裁员凸显了企业受产能过剩和低迷需求，陷入价格战的影响。全球每年生产的太阳能电池板数量是使用量的两倍，大部分产品由中国公司制造。