Aggregator

Пока индустрия борется с «токсичными» запросами, реальная угроза исходит совсем из другого места.

The cybersecurity landscape faces a new and significant threat as the notorious CL0P ransomware group has launched a large-scale extortion campaign targeting Oracle E-Business Suite (EBS) environments. Starting September 29, 2025, security researchers began tracking a sophisticated operation where threat actors claimed affiliation with the CL0P extortion brand and initiated a high-volume email campaign targeting […]

The post Google Warns of CL0P Ransomware Group Actively Exploiting Oracle E-Business Suite Zero-Day appeared first on Cyber Security News.

A vulnerability was found in Google Go up to 1.25.1. It has been declared as problematic. The affected element is an unknown function of the component crypto-x509. Such manipulation leads to resource consumption. This vulnerability is uniquely identified as CVE-2025-58187. The attack can be launched remotely. No exploit exists. It is recommended to upgrade the affected component.

A vulnerability was found in Google Go up to 1.25.1. It has been classified as problematic. Impacted is an unknown function of the component net-http. This manipulation causes uncontrolled memory allocation. This vulnerability is handled as CVE-2025-58186. The attack can be initiated remotely. There is not any exploit available. Upgrading the affected component is recommended.

A vulnerability was found in Google Go up to 1.25.1 and classified as problematic. This issue affects the function Reader.ReadResponse of the component net-textproto. The manipulation results in resource consumption. This vulnerability is known as CVE-2025-61724. It is possible to launch the attack remotely. No exploit is available. It is suggested to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in Google Go up to 1.25.1. This affects an unknown part of the component archive-tar. Executing manipulation can lead to allocation of resources. This vulnerability appears as CVE-2025-58183. The attack may be performed from remote. There is no available exploit. You should upgrade the affected component.

A vulnerability has been found in Google Go up to 1.25.1 and classified as critical. This vulnerability affects unknown code of the component crypto-tls. The manipulation leads to injection. This vulnerability is traded as CVE-2025-58189. It is possible to initiate the attack remotely. There is no exploit available. The affected component should be upgraded.

A vulnerability, which was classified as problematic, has been found in Google Go up to 1.25.1. Affected by this issue is the function Equal of the component crypto-x509. Performing manipulation results in denial of service. This vulnerability is reported as CVE-2025-58188. The attack is possible to be carried out remotely. No exploit exists. It is advisable to upgrade the affected component.

A vulnerability classified as problematic was found in Google Go up to 1.25.1. Affected by this vulnerability is an unknown functionality of the component encoding-pem. Such manipulation leads to resource consumption. This vulnerability is documented as CVE-2025-61723. The attack can be executed remotely. There is not any exploit available. Upgrading the affected component is advised.

A vulnerability classified as problematic has been found in Google Go up to 1.25.1. Affected is an unknown function of the component encoding-asn1. This manipulation causes uncontrolled memory allocation. This vulnerability is registered as CVE-2025-58185. Remote exploitation of the attack is possible. No exploit is available. It is recommended to upgrade the affected component.

A vulnerability described as critical has been identified in Google Go up to 1.25.1. This impacts an unknown function of the component net-url. The manipulation results in Remote Code Execution. This vulnerability is cataloged as CVE-2025-47912. The attack may be launched remotely. There is no exploit available. Upgrading the affected component is recommended.

A vulnerability marked as problematic has been reported in Google Go up to 1.25.1. This affects the function ParseAddress of the component net-mail. The manipulation leads to resource consumption. This vulnerability is listed as CVE-2025-61725. The attack may be initiated remotely. There is no available exploit. It is suggested to upgrade the affected component.

MeetCard 是一款结合数字名片与防丢功能的产品，支持通过微信碰一碰快速获取多渠道联系方式，并借助 Apple Find My 网络实现精准追踪。其轻薄设计便于携带，适合多种场景使用。

In a coordinated effort, international law enforcement agencies seized the clearnet domain breachforums[.]hn, shutting down yet another incarnation of the notorious cybercrime marketplace BreachForums. The domain now displays a joint seizure notice from the U.S. Department of Justice (DOJ) and the Federal Bureau of Investigation (FBI), alongside French authorities, including the Brigade de Lutte Contre […]

The post Authorities Dismantle BreachForums’ Reemerged Clearnet Marketplace appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

这篇文章分析了RedLine Stealer恶意软件变种的功能与威胁，包括窃取浏览器扩展、加密货币钱包、FTP凭据等信息，并通过混淆技术规避检测。该软件对高价值数字资产构成严重威胁，建议用户采取隔离设备、杀毒扫描和重置凭证等措施应对。

这篇文章解释了Cloudflare错误代码521的原因和解决方法。该错误通常发生在服务器无法连接到Cloudflare网络时。用户可能会遇到访问失败的问题。建议检查网络连接或联系技术支持以解决问题。

作者：Zhiyuan Wei, Xiaoxuan Yang, Jing Sun, Zijian Zhang 译者：知道创宇404实验室翻译组 原文链接：https://arxiv.org/html/2510.06645v1 摘要 现代软件系统复杂度日益提升，导致安全漏洞愈发普遍，进而引发严重的数据泄露风险与巨额经济损失。因此，可靠的代码漏洞检测对于软件安全至关重要。尽管大型语言模型（LLMs...

文章描述了错误代码521的原因及其对网络连接的影响，并提供了相应的解决措施以帮助用户恢复正常的网络访问。

HackerNews 编译，转载请注明出处： Legit Security 近日披露了 GitHub Copilot Chat 人工智能助手的一个漏洞，该漏洞导致敏感数据泄露并允许攻击者完全控制 Copilot 的回复。 通过结合内容安全策略（CSP）绕过与远程提示注入，Legit Security 的研究员 Omer Mayraz 成功从私有仓库中泄露了 AWS 密钥和零日漏洞信息，并影响了 Copilot 向其他用户提供的回复。 Copilot Chat 旨在提供代码解释和建议，并允许用户通过 HTML 注释在渲染的 Markdown 中隐藏内容。隐藏评论仍会触发向仓库所有者发送的拉取请求通知，但不会显示评论内容。然而，相关提示也会被注入到其他用户的上下文中。 Mayraz 解释说，隐藏评论功能允许用户影响 Copilot，使其向其他用户显示代码建议，包括恶意软件包。Mayraz 还发现，他可以制作包含访问用户私有仓库指令的提示，对其内容进行编码，并将其附加到 URL 中。“当用户点击该 URL 时，数据就会被回传给我们，”他指出。 不过，GitHub 严格的内容安全策略阻止从非平台拥有的域名获取图片及其他内容，从而防止通过向受害者聊天中注入 HTML <img> 标签来泄露数据。当 README 或 Markdown 文件中包含外部图片时，GitHub 会解析这些图片以识别 URL，并使用开源项目 Camo 为每个文件生成匿名代理 URL。外部 URL 会被重写为 Camo 代理 URL，当浏览器请求图片时，Camo 代理会检查 URL 签名，并且仅当 URL 由 GitHub 签名时才从原始位置获取外部图片。 这种做法通过使用受控代理获取图片来确保安全，防止利用任意 URL 泄露数据，并且在 README 中显示图片时不会暴露图片 URL。 “我们注入到受害者聊天中的每个 <img> 标签必须包含预先生成的有效 Camo URL 签名，否则 GitHub 的反向代理将不会获取内容，”Mayraz 指出。 为了绕过这一保护机制，该研究员创建了一个包含字母表中所有字母和符号的字典，为每个字符预生成对应的 Camo URL，并将该字典嵌入到注入的提示中。 他创建了一个对每个请求返回 1×1 透明像素的服务器，构建了可用于从仓库泄露敏感内容的字母和符号的 Camo URL 字典，随后制作了触发漏洞的提示。 Mayraz 发布了概念验证视频，演示了如何利用该攻击从私有仓库中泄露零日漏洞和 AWS 密钥。 8月14日，GitHub 通知该研究员，已通过禁止使用 Camo 泄露用户敏感信息的方式修复了该问题。 消息来源：securityweek； 本文由 HackerNews.cc 翻译整理，封面来源于网络； 转载请注明“转自 HackerNews.cc”并附上原文

A vulnerability labeled as problematic has been found in WP JobHunt Plugin up to 7.6 on WordPress. The impacted element is an unknown function. Executing manipulation of the argument cs_job_title can lead to cross site scripting. This vulnerability is tracked as CVE-2025-7781. The attack can be launched remotely. No exploit exists.