Aggregator

U.S. CISA adds SonicWall SonicOS and Palo Alto PAN-OS flaws to its Known Exploited Vulnerabilities catalog

Security Affairs
9 months 3 weeks ago
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds SonicWall SonicOS and Palo Alto PAN-OS vulnerabilities to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added SonicWall SonicOS and Palo Alto PAN-OS vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog. The two vulnerabilities are: Researchers recently warned that threat actors exploit a […]
Pierluigi Paganini

中国陆地到 2100 年会发生什么变化

Solidot
9 months 3 weeks ago
如果到 2100 年全球平均气温上升控制在比工业化前的水平高 1.5°C 以内，中国的陆地会发生什么变化？北京师范大学的研究人员尝试回答这一问题。模拟结果显示：在全球变暖 1.5°C 情景下，中国与山水林田湖草相关的生态系统质量有所改善；灌木、湿地和森林系统的面积预计分别增加 185%、79% 和 33%，其中低密度灌木、高密度湿地和高密度森林的增长最为显著。但耕地会大幅减少：35% 的现有耕地（截至 2020 年）将转变为其他类型，其中高密度耕地将减少近 50%。这一变化将对粮食安全构成严重挑战。耕地将主要转变为湿地和林地，尤其是在四川盆地、华北平原和东北平原等粮食生产地区。

CVE-2025-22622 | Age Checker Age Verification 1.20.0 class-wc-integration-agechecker-integration.php cross site scripting

Vuldb Updates
9 months 3 weeks ago
A vulnerability was found in Age Checker Age Verification 1.20.0 and classified as problematic. This issue affects some unknown processing of the file myapp/class-wc-integration-agechecker-integration.php. The manipulation leads to cross site scripting. The identification of this vulnerability is CVE-2025-22622. The attack may be initiated remotely. There is no exploit available.
vuldb.com

FSF 回应 Red Hat 限制源代码获取

Solidot
9 months 3 weeks ago
2023 年 6 月 Red Hat 宣布其企业发行版 RHEL（Red Hat Enterprise Linux）相关源码仅通过 CentOS Stream 公开。此举加大了面向企业的社区发行版如 Alma Linux 和 Rocky Linux 以及甲骨文的企业发行版 Oracle Linux 构建 1:1 二进制兼容版本的难度，引发了 Red Hat 走向闭源的批评。Red Hat 则坚称它遵守了 GPLv2 许可证的规定，恪守对开源的承诺。时隔近两年之后，自由软件基金会（FSF）做出了回应。FSF 称他们不赞同 Red Hat 的做法，此举是否构成对 GPL 的违反需要法律分析，而 FSF 不提供法律建议。Red Hat 的做法肯定违背了 GPL 的精神，他们本希望像 Red Hat 这样的组织能推动自由软件运动前进。GPL 只规定 Red Hat 有义务向其产品的购买者提供源代码，并没有声明源代码需要自由分发给每一个人。

CVE-2025-22622 | Age Checker Age Verification 1.20.0 class-wc-integration-agechecker-integration.php cross site scripting

VulDB Recent Entries
9 months 3 weeks ago
A vulnerability was found in Age Checker Age Verification 1.20.0 and classified as problematic. This issue affects some unknown processing of the file myapp/class-wc-integration-agechecker-integration.php. The manipulation leads to cross site scripting. The identification of this vulnerability is CVE-2025-22622. The attack may be initiated remotely. There is no exploit available.
vuldb.com

Kunai: Open-source threat hunting tool for Linux

Help Net Security
9 months 3 weeks ago

Kunai is an open-source tool that provides deep and precise event monitoring for Linux environments. “What sets Kunai apart is its ability to go beyond simple event generation. While most security monitoring tools rely on syscalls or kernel function hooking, Kunai takes a more advanced approach by correlating events on the host and providing enriched insights. This means fewer but more meaningful events, reducing noise and the strain on log ingestion while delivering deeper visibility … More →

The post Kunai: Open-source threat hunting tool for Linux appeared first on Help Net Security.

Mirko Zorz

Clinical Trial Database Exposes 1.6M Records to Web

Ransomware DataBreachToday.com
9 months 3 weeks ago
Researcher Says Firm Failed to Secure Sensitive Health Data From Survey Forms
An unsecured database containing 2 terabytes of data allegedly exposed more than 1.6 million clinical research records to the internet, including sensitive personal and medical information of patients, said the security researcher who discovered the lapse. Why does this keep happening?

North Korea Stealing Cryptocurrency With JavaScript Implant

Ransomware DataBreachToday.com
9 months 3 weeks ago
'Marstech1' Malware Targets Developers Through GitHub Respository
New North Korean malware is targeting cryptowallets with an unconventional command-and-control infrastructure and through malware embedded into a GitHub repository that's apparently the account of a Pyongyang hacker. The implant appears to have emerged late last December.

Dream Raises $100M to Strengthen AI-Driven National Security

Ransomware DataBreachToday.com
9 months 3 weeks ago
Investment Led by Bain Capital to Enhance Predictive Threat Detection Capabilities
Dream raised $100 million in Series B funding from Bain Capital on a $1.1 billion valuation to enhance its proprietary Cyber Language Model and expand globally, with a focus on U.S. market entry to address growing national security threats through AI-driven cybersecurity and predictive solutions.

DOGE Team Wins Legal Battle, Retains Access to Federal Data

Ransomware DataBreachToday.com
9 months 3 weeks ago
Court Clears Way for Musk's DOGE Team to Continue Accessing Sensitive Federal Data
A federal judge has ruled against a lawsuit from 14 state attorneys general requesting a temporary restraining order against Elon Musk and the Department of Government Efficiency amid controversy surrounding the billionaire's access to sensitive government systems.

Managed ad