Aggregator

China-linked Salt Typhoon hacked a European telecom in July 2025 via a Citrix NetScaler Gateway exploit for initial access. A European telecom firm was targeted in July 2025 by China-linked APT group Salt Typhoon (also known as Earth Estries, FamousSparrow, GhostEmperor, UNC5807, RedMike)), which exploited a Citrix NetScaler Gateway to gain initial access. In late […]

Over the past several months, cybersecurity researchers have observed a surge of fraudulent Chrome extensions masquerading as legitimate WhatsApp Web automation tools. These 131 rebranded clones, each presenting as distinct offerings, share an identical codebase designed to automate bulk messaging and scheduling without user consent. By injecting custom scripts directly into the WhatsApp Web interface, […]

The post 131 Malicious Extensions Targeting WhatsApp Used Found in Chrome Web Store appeared first on Cyber Security News.

A vulnerability labeled as critical has been found in Springboard Extension on Mediawiki. Affected is an unknown function. Such manipulation leads to command injection. This vulnerability is listed as CVE-2025-62696. The attack may be performed from remote. There is no available exploit.

A vulnerability was found in WikiLove Extension 1.39 on Mediawiki. It has been classified as problematic. This affects an unknown function. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2025-62694. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability has been found in LastModified Extension up to 1.38 on Mediawiki and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2025-62693. The attack is possible to be carried out remotely. No exploit exists. The affected component should be upgraded.

A vulnerability was found in PageForms Extension 1.44 on MediaWiki and classified as problematic. This issue affects some unknown processing. Such manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2025-62657. The attack can be launched remotely. No exploit exists.

A vulnerability has been found in GlobalBlocking Extension 1.43/1.44 on MediaWiki and classified as problematic. This vulnerability affects unknown code. This manipulation causes cross site scripting. This vulnerability is handled as CVE-2025-62656. The attack can be initiated remotely. There is not any exploit available.

国家授时中心遭受的APT攻击并非孤立事件。

10月18日，中国互联网络信息中心在2025（第六届）中国互联网基础资源大会上发布《生成式人工智能应用发展报告（2025）》。中国互联网络信息中心副主任张晓对《报告》进行了发布与解读。

国家安全机关近日披露了一起美国国家安全局对我国家授时中心发起持续两年多的网络攻击案件。

在当今科技飞速发展的时代，低空经济正成为推动城市发展的新引擎。从物流配送到应急救援，从城市管理到环境监测，低空应用场景日益丰富。

近年来，因用户侧原因导致的电网故障停电事件数量呈现上升趋势，涉网安全管理必须向用户侧延伸。国家能源局印发《关于加强用户侧涉网安全管理的通知》，恰逢其时。

传统的安全防护措施难以及时发现这类隐匿攻击，往往只能在攻击造成实质性破坏后才得以察觉。为了更好地应对这种复杂的威胁，网络靶场作为模拟真实攻击环境的有效工具，可以为APT攻击的检测、溯源及防御策略的优化提供重要支持。

A vulnerability described as critical has been identified in Mozilla Firefox up to 143. Affected is an unknown function. Executing manipulation can lead to memory corruption. This vulnerability appears as CVE-2025-11715. The attack may be performed from remote. There is no available exploit. Upgrading the affected component is recommended.

A vulnerability classified as critical has been found in Mozilla Thunderbird up to 143. Affected by this vulnerability is an unknown functionality. The manipulation leads to memory corruption. This vulnerability is traded as CVE-2025-11715. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability labeled as critical has been found in Mozilla Firefox up to 143. This affects an unknown function. Such manipulation leads to memory corruption. This vulnerability is documented as CVE-2025-11714. The attack can be executed remotely. There is not any exploit available. The affected component should be upgraded.

A vulnerability marked as critical has been reported in Mozilla Thunderbird up to 143. This impacts an unknown function. Performing manipulation results in memory corruption. This vulnerability is reported as CVE-2025-11714. The attack is possible to be carried out remotely. No exploit exists. It is suggested to upgrade the affected component.

GlassWorm is the world’s first self-propagating worm targeting VS Code extensions in the OpenVSX marketplace, unleashing invisible malicious payloads and decentralized command infrastructure that make it nearly impossible to detect or dismantle. First identified on October 17, 2025, GlassWorm hijacks developer machines via invisible Unicode code, harvests credentials, drains cryptocurrency wallets, and transforms infected systems […]

The post New GlassWorm Threat Uses Stealthy Code to Target OpenVSX Extensions appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A vulnerability labeled as critical has been found in Digiwin EasyFlow .NET and EasyFlow AiNet up to 6.6.19. This affects an unknown part. Executing manipulation can lead to missing authentication. This vulnerability is tracked as CVE-2025-11949. The attack can be launched remotely. No exploit exists.

A vulnerability was found in Delta Electronics ASDA-Soft up to 7.0.2.0 and classified as critical. The affected element is an unknown function. The manipulation results in stack-based buffer overflow. This vulnerability is reported as CVE-2025-62579. The attack can be launched remotely. No exploit exists.