Aggregator

Alibaba поставила 9 из 10 и развела руками без фикса.

自研LangGraph漏洞挖掘工作流

连上服务器就被黑？libssh2连曝4个高危漏洞，攻击者可劫持客户端内存甚至执行任意代码。

看雪论坛作者ID：红皮西瓜

Tengu, a newly observed Mirai-derived botnet, is demonstrating how modern IoT malware is rapidly evolving beyond traditional distributed denial-of-service (DDoS) operations by integrating persistence, evasion, and multi-functional attack capabilities. Unlike legacy Mirai variants, Tengu employs a hybrid C2 model that blends plaintext and encrypted communications. Initial registration and heartbeat messages are transmitted in cleartext, while […]

The post Tengu Mirai Botnet Uses Watchdog Reboots and Binary Bricking to Resist Removal appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

NVIDIA has launched a new Open Secure AI Alliance to build an “open defense stack for agents”

Рекомендательные алгоритмы могут показывать подросткам контент The Com.

Tengu, a newly observed Mirai-based botnet, is making infected IoT devices far harder to clean. It targets internet-facing embedded Linux systems, particularly devices that leave Telnet or other remote administration services exposed. Once installed, the malware can keep a device available for malicious activity and turn a routine removal attempt into an operational problem. The […]

The post New Tengu Mirai Botnet Reboots Your IoT Device When You Try to Kill It appeared first on Cyber Security News.

Proofpoint uncovered Cruciferra, a crypter-as-a-service that helps hackers evade antivirus and deliver malware in multiple campaigns. Proofpoint’s research team traced a wave of income-tax-themed lures targeting Indian taxpayers, tax professionals, and corporate finance teams back to a crypter service called Cruciferra, and the tool turns out to be shared infrastructure used across multiple unrelated criminal […]

攻击者威胁索要赎金

严重漏洞必须在2-4天内实施缓解措施

勒索软件团伙协同攻击VPN设备并大规模部署EDR终结技术；ChatGPT AgentForger漏洞暴露AI代理部署风险；微软修补Defender与Certighost漏洞；CISA新增Fortinet与Arista漏洞至KEV。

防勒索阻入侵 火绒打造轻量化企业安全运维防线

Fake ShinyHunters-themed sextortion emails are abusing data from recent ShinyHunters leaks to threaten victims with the release of fabricated “webcam recordings” unless a 2,000 dollar Bitcoin ransom is paid within 48 hours. Despite the technical-sounding claims, there is no evidence of actual device compromise, malware deployment, or recorded content behind these messages. The emails impersonate […]

The post Fake ShinyHunters Emails Give Victims 48 Hours to Pay $2,000 Bitcoin Ransom appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Healthcare billing company Medical Computer Business Services (MCBS) has disclosed that a 2025 network breach exposed the sensitive information of more than 1.2 million people. [...]

Ошибка в обработке графики открыла путь к самым привилегированным процессам гиганта из Редмонда.