Aggregator

这款游戏在Steam目录中出现了近一周的时间，并被多达1500名用户下载。分发服务正在向可能受到影响的用户发送通知，建议他们重新安装Windows。

Kunai is an open-source tool that provides deep and precise event monitoring for Linux environments. “What sets Kunai apart is its ability to go beyond simple event generation. While most security monitoring tools rely on syscalls or kernel function hooking, Kunai takes a more advanced approach by correlating events on the host and providing enriched insights. This means fewer but more meaningful events, reducing noise and the strain on log ingestion while delivering deeper visibility … More →

The post Kunai: Open-source threat hunting tool for Linux appeared first on Help Net Security.

Researcher Says Firm Failed to Secure Sensitive Health Data From Survey Forms
An unsecured database containing 2 terabytes of data allegedly exposed more than 1.6 million clinical research records to the internet, including sensitive personal and medical information of patients, said the security researcher who discovered the lapse. Why does this keep happening?

'Marstech1' Malware Targets Developers Through GitHub Respository
New North Korean malware is targeting cryptowallets with an unconventional command-and-control infrastructure and through malware embedded into a GitHub repository that's apparently the account of a Pyongyang hacker. The implant appears to have emerged late last December.

Investment Led by Bain Capital to Enhance Predictive Threat Detection Capabilities
Dream raised $100 million in Series B funding from Bain Capital on a $1.1 billion valuation to enhance its proprietary Cyber Language Model and expand globally, with a focus on U.S. market entry to address growing national security threats through AI-driven cybersecurity and predictive solutions.

Court Clears Way for Musk's DOGE Team to Continue Accessing Sensitive Federal Data
A federal judge has ruled against a lawsuit from 14 state attorneys general requesting a temporary restraining order against Elon Musk and the Department of Government Efficiency amid controversy surrounding the billionaire's access to sensitive government systems.

A vulnerability, which was classified as problematic, was found in deepakkite User Private Files Plugin up to 2.1.3 on WordPress. This affects an unknown part. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2024-13799. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability, which was classified as critical, has been found in GNU grub2. Affected by this issue is some unknown functionality of the component gettext. The manipulation leads to integer overflow. This vulnerability is handled as CVE-2024-45777. Attacking locally is a requirement. There is no exploit available.

A vulnerability classified as critical was found in GNU grub2. Affected by this vulnerability is an unknown functionality of the component Dump Command Handler. The manipulation leads to Local Privilege Escalation. This vulnerability is known as CVE-2025-1118. Local access is required to approach this attack. There is no exploit available.

A vulnerability classified as problematic has been found in easypromosapp Easypromos Plugin up to 1.3.8 on WordPress. Affected is an unknown function of the component Shortcode Handler. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2024-13443. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

全球范围内已有超过 25 个恶意 IP 地址对未安装补丁的系统发动攻击。

A vulnerability was found in wedevs Subscribe2 Plugin up to 10.43 on WordPress. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to cross site scripting. The identification of this vulnerability is CVE-2024-11582. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in deepakkite User Private Files Plugin up to 2.1.3 on WordPress. This affects an unknown part. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2024-13799. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability was found in wproyal Royal Elementor Addons and Templates Plugin up to 1.7.1007 on WordPress. It has been declared as problematic. This vulnerability affects the function wpr_filter_woo_products. The manipulation leads to cross-site request forgery. This vulnerability was named CVE-2025-1441. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

腾讯云安全基于云视角持续监测安全威胁，关注新曝光漏洞武器，实时监测针对云上资产的各类攻击行为，感知在野攻击情况。

腾讯云安全基于云视角持续监测安全威胁，关注新曝光漏洞武器，实时监测针对云上资产的各类攻击行为，感知在野攻击情况。

腾讯云安全基于云视角持续监测安全威胁，关注新曝光漏洞武器，实时监测针对云上资产的各类攻击行为，感知在野攻击情况。

腾讯云安全基于云视角持续监测安全威胁，关注新曝光漏洞武器，实时监测针对云上资产的各类攻击行为，感知在野攻击情况。

腾讯云安全基于云视角持续监测安全威胁，关注新曝光漏洞武器，实时监测针对云上资产的各类攻击行为，感知在野攻击情况。

腾讯云安全基于云视角持续监测安全威胁，关注新曝光漏洞武器，实时监测针对云上资产的各类攻击行为，感知在野攻击情况。