Aggregator

Обновления безопасности заставили тысячи программистов экстренно править реестр Windows.

快来！在线回答 YAKer 们的疑问

Cybersecurity researchers have disclosed details of a recently patched critical security flaw in WatchGuard Fireware that could allow unauthenticated attackers to execute arbitrary code. The vulnerability, tracked as CVE-2025-9242 (CVSS score: 9.3), is described as an out-of-bounds write vulnerability affecting Fireware OS 11.10.2 up to and including 11.12.4_Update1, 12.0 up to and including

嗯，用户让我总结一篇文章的内容，控制在一百个字以内，而且不需要用“文章内容总结”或者“这篇文章”这样的开头。好的，我先看看这篇文章讲的是什么。 文章主要讲的是WatchGuard Fireware的一个严重漏洞，编号是CVE-2025-9242，CVSS评分9.3。这个漏洞属于越界写入类型，影响了多个版本的Fireware OS。攻击者可以利用这个漏洞在未经身份验证的情况下执行任意代码，影响到使用IKEv2协议的移动用户VPN和分支办公室VPN。 然后文章提到这个漏洞已经被修复了，修复版本包括2025.1.1、12.11.4等。还有安全研究员分析了漏洞的原因，是在处理客户端证书时缺少长度检查，导致缓冲区溢出。 此外，攻击者可以利用这个漏洞获得对指令指针寄存器的控制，进而启动一个Python交互shell，并通过多步操作升级权限到完整的Linux shell。 还有提到watchTowr Labs还分析了另一个漏洞CVE-2025-3600和Dell UnityVSA的漏洞CVE-2025-36604。 现在我需要把这些信息浓缩到100字以内。首先说明漏洞名称、类型、影响范围、攻击方式以及修复情况。然后可能还要提到攻击者如何利用它进行进一步的操作。 确保语言简洁明了，不使用复杂的术语。避免使用用户可能不熟悉的缩写，比如CVE、CVSS等可能需要解释一下，但考虑到用户可能已经了解这些术语，所以直接使用也没问题。 最后检查一下字数是否在限制内，并且确保没有遗漏关键点：漏洞名称、类型、影响范围、攻击方式、修复情况以及潜在影响。 WatchGuard Fireware被发现存在严重越界写入漏洞（CVE-2025-9242），允许未认证攻击者远程执行任意代码。该漏洞影响多个版本Fireware OS及IKEv2 VPN配置。研究人员指出该漏洞具备勒索软件团伙青睐的所有特征，并可通过多步操作最终获取Linux shell权限。

Cybercriminals are weaponizing artificial intelligence to accelerate malware development, discover vulnerabilities faster, and create more sophisticated phishing campaigns, according to Microsoft’s latest Digital Defense Report covering trends from July 2024 through June 2025. In 80% of the cyber incidents Microsoft investigated last year, attackers sought to steal data primarily for profit rather than intelligence gathering. […]

The post Microsoft Report Warns of AI-Powered Automation in Cyberattacks and Malware Creation appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

ConnectWise has issued a critical security update for its Automate™ platform after uncovering vulnerabilities that could allow attackers to intercept and tamper with software updates. The flaws, present in on-premises installations configured to use unsecured communication channels, put organizations at risk of deploying malicious code under the guise of routine patches. ConnectWise Automate 2025.9, released […]

The post ConnectWise Flaws Let Attackers Deliver Malicious Software Updates appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Have you ever come across a headline like “Could the Golden Gate collapse?” or “The surprising news released by Real Madrid”? These sensationalized headlines are crafted to immediately grab attention and compel clicks. While they may seem harmless, they often lead to clickbait scams—a deceptive form of phishing that exploits human psychology to steal personal […]

The post Clickbait Scams: The Misleading Method of Phishing first appeared on StrongBox IT.

The post Clickbait Scams: The Misleading Method of Phishing appeared first on Security Boulevard.

近期，360高级威胁团队发现透明部落组织针对Windows和Linux系统发起无差别攻击，其攻击手段具有针对性且隐蔽性较强。

Один HTTP-запрос — и злоумышленник получает полный контроль над корпоративным сервером.

好的，我现在需要帮用户总结一篇文章，控制在100字以内。首先，我得仔细阅读文章内容，抓住主要信息。 文章讲的是CERT-AGID发现了一种新的针对PagoPA的钓鱼攻击。这次攻击利用了Google的开放重定向机制，让链接看起来更可信，绕过了自动检测。钓鱼邮件假装是关于交通违规罚款的，引导用户点击链接。 链接结构是这样的：先到Google的一个子域名，然后重定向到bio.site的一个页面，这个页面模仿PagoPA的登录界面，收集用户的个人信息和支付卡数据。最后，这些数据被发送到privatedns.org的一个域名下。 文章还提到这种攻击手法在2023年就有类似案例，并且从2025年3月到10月，CERT-AGID已经检测到了220次类似的钓鱼活动，并生成了2574个IOC来帮助阻止这些网站。 总结的时候要突出关键点：新的钓鱼攻击、利用Google的重定向机制、伪装成PagoPA、收集敏感信息、已有历史案例和统计数据。 现在要把这些信息浓缩到100字以内，确保不遗漏重要细节。可能需要合并一些步骤，比如把Google和bio.site的部分合并描述。 最后检查一下字数是否符合要求，并确保语言简洁明了。 CERT-AGID发现了一种针对PagoPA的新钓鱼攻击，利用Google的开放重定向机制使链接看似可信以绕过安全检测。攻击者通过伪装成交通违规通知诱导用户点击链接，最终引导至仿冒PagoPA的钓鱼页面以窃取个人信息和支付卡数据。此类手法在2023年已有类似案例，并于2025年3月至10月期间检测到220次相关活动。

Swalwell: Sweeping CISA Cuts Leave Nation Vulnerable to Major Cyberattacks
A top Democratic lawmaker is demanding transparency and calling for the immediate reversal of major workforce cuts at the Cybersecurity and Infrastructure Security Agency, which is only operating with 35% of its total staff amid the ongoing government shutdown and resulting reductions-in-force.

2022 Ransomware Attack, Data Theft Affected 3.4 Million Patients
A California-based network of nine affiliated physician practices will pay nearly $50 million to settle consolidated class action litigation involving a 2022 ransomware and data theft attack that affected more than 3.4 million patients. Plaintiffs claimed their data was leaked on the darkweb.

Also, Internet-Exposed Call Center Software Under Attack and Patch Tuesday
This week: Chinese hackers exploited ArcGIS, Internet-exposed call center software under attack, October patch Tuesday, Massachusetts student sentenced for $3 million extortion hack, New York fined eight insurers $14.2M over data breaches, more than 100 VS Code extensions leak secrets.

Synthetic Identities for Superprime Borrowers Generate 3 Times Higher Fraud Losses
Auto lenders operate on a simple principle - the higher a borrower's credit score, the lower the risk. But new data from TransUnion reveals a troubling contradiction: Superprime borrowers with a credit score higher than 720 are generating three times more fraud losses than subprime borrowers.

嗯，用户让我帮忙总结一篇文章，控制在一百个字以内，而且不需要用“文章内容总结”之类的开头。首先，我需要仔细阅读这篇文章，了解它的主要内容。 文章的主题是关于网络安全意识月的，特别是针对可穿戴设备的安全性。里面提到了五个关键点：过时的固件、不安全的网络连接、过多的权限、未被IT管理的设备以及未加密的数据传输。 接下来，我需要将这些要点浓缩成一句话。要确保涵盖主要风险和建议措施，同时保持简洁明了。可能需要提到设备安全的重要性以及具体的防护措施。 最后，检查字数是否在一百字以内，并且语言要自然流畅，不使用任何格式或开头语。 文章强调了可穿戴设备在日常生活中的潜在安全风险，并提供了五项关键建议：更新固件、锁定网络连接、限制权限、确保IT管理以及启用数据加密。这些措施有助于保护个人数据和企业网络免受网络攻击。

Matthew D. Lane, a Massachusetts student, got four years in prison for hacking and extorting $3M from PowerSchool and another company. A Massachusetts student, Matthew D. Lane, was sentenced to four years in prison for hacking and extorting about $3 million from two companies, including PowerSchool. In May, Lane pleaded guilty to hacking two U.S. […]

麻省学生Matthew D. Lane因黑客攻击PowerSchool等公司并勒索300万美元被判4年徒刑。其窃取师生数据并威胁泄露以索要赎金，导致超7000万人受影响。法院责令其赔偿1400万美元并支付2.5万美元罚款。

Multiple Cisco desk, IP, and video phones are at risk of remote denial-of-service (DoS) and cross-site scripting (XSS) attacks due to flaws in their Session Initiation Protocol (SIP) software. The weaknesses affect Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 models when they are registered to Cisco Unified Communications […]

The post Cisco Desk, IP, and Video Phones Vulnerable to Remote DoS and XSS Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

VMware has launched Workstation 25H2 and Fusion 25H2, the newest iterations of its desktop hypervisors, featuring a revamped versioning system, enhanced tools, and broader compatibility with modern hardware and operating systems. These updates aim to streamline virtualization for developers, IT professionals, and testers by improving performance, automation, and support for cutting-edge platforms. The releases introduce […]

The post VMware Workstation and Fusion 25H2 Released with New Features and Latest OS Support appeared first on Cyber Security News.