Aggregator

HTTP, майнеры и WannaCry. Positive Technologies проанализировала сети десятков компаний.

Currently trending CVE - Hype Score: 5

U.K. outsourcing giant Capita will pay the largest penalty ever imposed by the Information Commissioner's Office (ICO) in a ransomware case.

Today, CISA issued Emergency Directive ED 26-01: Mitigate Vulnerabilities in F5 Devices to direct Federal Civilian Executive Branch agencies to inventory F5 BIG-IP products, evaluate if the networked management interfaces are accessible from the public internet, and apply newly released updates from F5. 

A nation-state affiliated cyber threat actor has compromised F5 systems and exfiltrated data, including portions of the BIG-IP proprietary source code and vulnerability information, which provides the actor with a technical advantage to exploit F5 devices and software. This poses an imminent threat to federal networks using F5 devices and software.

Key Actions Required:

• Inventory: Identify all instances of F5 BIG-IP hardware devices and F5OS, BIG-IP TMOS, Virtual Edition, BIG-IP Next, BIG-IP IQ software, and BNK / CNF.
• Harden Public-Facing Hardware and Software Appliances: Identify if physical or virtual BIG-IP devices exposed to the public internet provide public access to the networked management interface.
• Update Instances of BIG-IP Hardware and Software Applications: Apply the latest vendor updates by Oct. 22, 2025, for the following products: F5OS, BIG-IP TMOS, BIG-IQ, and BNK / CNF— validate the F5 published MD5 checksums for its software image files and other F5 downloaded software. For other devices, update with the latest software release by Oct. 31, 2025, and apply the latest F5-provided asset hardening guidance.
• Disconnect End of Support Devices: Disconnect all public-facing F5 devices that have reached their end-of-support date. Report mission-critical exceptions to CISA.
• Mitigate Against Cookie Leakage: If CISA notifies an agency of a BIG-IP cookie leakage vulnerability, the agency shall follow CISA’s accompanying mitigation instructions.
• Report: Submit a complete inventory of F5 products and actions taken to CISA by 11:59 p.m. EDT, Oct. 29, 2025.

For detailed guidance, refer to the full Emergency Directive ED 26-01.

CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.

• CVE-2025-54253 Adobe Experience Manager Forms Code Execution Vulnerability

This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. 

Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the KEV Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the BOD 22-01 Fact Sheet for more information.

Although BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediation of KEV Catalog vulnerabilities as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.

429 инцидента за год. 204 из них классифицированы как «национально значимые».

Cybersecurity firm Sublime Security details a new credential phishing scam impersonating Google Careers to steal login details from Google Workspace and Microsoft 365 users.

文章探讨了电子邮件安全与合规之间的差距及其对组织的影响。随着网络钓鱼和BEC攻击的复杂化，监管要求逐渐严格，但许多组织仍未能有效整合安全与合规措施。DMARC等技术控制成为关键要求，而员工培训和实时检测能力也成为合规的重要组成部分。未实施这些措施可能导致法律风险和保险问题。

2025年第三季度欧洲遭遇288起勒索软件攻击, Qilin以65起居首, SafePay迅速崛起至第二位。德国遭受69起攻击最多, 英国、意大利等紧随其后。机场等关键基础设施受损导致多国混乱。威胁持续且不断演变。

США и Британия разгромили крупнейшую мошенническую сеть Азии.

TLDR Even if you take nothing else away from this piece, if your organization is evaluating passkey deployments, it is insecure to deploy synced passkeys. Synced passkeys inherit the risk of the cloud accounts and recovery processes that protect them, which creates material enterprise exposure. Adversary-in-the-middle (AiTM) kits can force authentication fallbacks that circumvent strong

嗯，用户让我总结一下这篇文章的内容，控制在100字以内，而且不需要用“文章内容总结”这样的开头。直接写描述就行。 首先，我需要通读整篇文章，抓住主要观点。文章主要讨论了同步passkey在企业中的安全性问题。作者指出，同步passkey会引入云账户和恢复流程的风险，从而增加企业的安全暴露。 接着，文章提到了几种攻击方式，比如中间人攻击（AiTM）会导致认证降级，恶意浏览器扩展可以劫持WebAuthn请求，泄露凭证。这些都说明了同步passkey的不安全性。 然后，作者建议企业使用设备绑定的passkey，比如硬件安全密钥。这些设备绑定的passkey更安全，有更好的管理控制能力，并且应该成为企业访问的强制要求。 最后，文章还提供了一些企业在实施passkey计划时的策略和指导原则，比如消除所有回退方法、监控浏览器扩展等。 综合以上内容，我需要在100字以内简洁地表达这些要点：同步passkey的安全风险、中间人攻击、恶意扩展、设备绑定passkey的优势以及企业的应对策略。 同步Passkeys存在云账户接管、认证降级和浏览器扩展攻击风险。设备绑定Passkeys更安全可靠。企业应优先采用硬件安全密钥，并消除弱认证回退路径。

根据国家信息安全漏洞库（CNNVD）统计，本周（2025年10月6日至2025年10月12日）安全漏洞情况如下

根据国家信息安全漏洞库（CNNVD）统计，2025年9月采集安全漏洞4340个。

一. 当前领域的发展情况1.1拒答定义与核心价值问题：大模型在问答、对话等任务中容易出现幻觉、过度自信、输出

嗯，用户让我帮忙总结一下这篇文章的内容，控制在100个字以内，而且不需要用“文章内容总结”或者“这篇文章”这样的开头。直接写描述就行。 首先，我得通读一下文章。文章是关于苹果的漏洞赏金计划的。苹果现在提供200万美元的赏金，寻找零点击漏洞。根据苹果官网，他们正在扩大研究范围，增加奖励类别，并引入了旗帜系统，让研究人员能更客观地展示漏洞，并获得更快的奖励。 接下来，文章提到苹果将最高赏金提高到200万美元，针对那些能实现类似复杂间谍软件攻击目标的漏洞链。这是业内前所未有的金额。此外，还有额外奖励机制，比如绕过锁定模式或在测试版软件中发现漏洞，最高奖励可能超过500万美元。 赏金类别也扩展到了更多的攻击面，比如WebKit沙盒逃逸和无线邻近漏洞。苹果还引入了目标旗帜系统，用于证明某些顶级类别的可利用性，并帮助确定奖项资格。提交报告时带有目标旗帜的研究人员将有资格获得加速奖励，在修复可用之前就能处理。 好的，现在我需要把这些信息浓缩到100字以内。要抓住关键点：苹果增加赏金至200万美元，寻找零点击漏洞；扩大研究范围；引入旗帜系统加速奖励；最高可能超过500万美元。 这样应该可以了。 Apple 提高漏洞赏金至 200 万美元，并扩大研究范围和引入旗帜系统以加速奖励发放。

关键词安全漏洞微软近日在 10 月的“补丁星期二”更新中修复了 183 个安全漏洞，其中包括 三项已被在野利用

关键词iPhone昨日10月14日早间，多个用户反映在尝试激活iPhone时遇到异常，系统提示无法完成激活。