Aggregator

В коде известный базы данных обнаружили неожиданный сюрприз.

Security researchers at UC Irvine reveal the 'Mic-E-Mouse' attack, showing how high-DPI optical sensors in modern mice can detect desk vibrations and reconstruct user speech with high accuracy. Learn how this side-channel vulnerability affects your privacy.

Cisco Talos发现攻击者滥用CSS属性，在恶意邮件中隐藏无关内容以绕过检测。这种技术常见于垃圾邮件和钓鱼攻击中，并对现有防御系统构成挑战。

文章讨论了Outlook用户常遇到的PST文件损坏问题及其原因，包括大文件、系统崩溃、网络问题、病毒和插件冲突等。微软提供的ScanPST工具适用于轻微损坏，但面对严重或大型损坏时效果有限。文章推荐使用Stellar Repair for Outlook修复严重损坏的PST文件，并详细介绍了其功能和使用步骤。

录播+直播 动手实践，实现从0到1的跨越

看雪论坛作者ID：h1J4cker

内存分析包0.6版本发布，新增全局模块检查、本地时间显示、SID解析及进程命令行展示功能，并预览AI分析功能，相关视频已发布。

Nederlandse militairen maken vanaf vandaag deel uit van de Europese troepenmacht Eufor Althea in Bosnië en Herzegovina. Het gaat om maximaal 175 luchtmobiele infanteristen en ondersteunend personeel, die onderdeel zijn van een multinationaal bataljon. Doel is veiligheid en stabiliteit op de Westelijke Balkan te bevorderen.

Что происходит с данными, которые вы просто сказали вслух?

A critical deserialization flaw in GoAnywhere MFT’s License Servlet, tracked as CVE-2025-10035, has already been weaponized by the Storm-1175 group to execute the Medusa ransomware. The vulnerability affects GoAnywhere MFT versions up to 7.8.3. It resides in the License Servlet Admin Console, where a threat actor can forge a license response signature and bypass validation […]

The post GoAnywhere 0-Day RCE Vulnerability Exploited in the Wild to Deploy Medusa Ransomware appeared first on Cyber Security News.

A critical Oracle E-Business Suite vulnerability is being actively exploited by the Clop ransomware group

Oracle has issued an emergency security alert for CVE-2025-61882, a critical vulnerability in Oracle E-Business Suite (EBS) with active exploitation […]

The post CVE-2025-61882 Oracle E-Business Suite Zero-Day Under Active Exploitation appeared first on HawkEye.

In recent years, adversaries have abandoned traditional malware in favor of “living-off-the-land” operations against cloud and SaaS environments. Rather than deploying custom ransomware binaries, many threat actors now exploit misconfigured database services—leveraging only built-in commands to steal, destroy, or encrypt data. Victims often discover their data missing or inaccessible, replaced only by ransom notes stored […]

The post Hackers Exploit Legitimate Commands to Breach Databases appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Elastic has released a security advisory detailing a medium-severity vulnerability in the Kibana CrowdStrike Connector that could allow for the exposure of sensitive credentials. The flaw, tracked as CVE-2025-37728, affects multiple versions of Kibana and could allow a malicious user to access cached CrowdStrike credentials from other users within the same environment. The vulnerability underscores […]

The post Kibana Crowdstrike Connector Vulnerability Exposes Protected Credentials appeared first on Cyber Security News.

LockBit勒索软件团伙遭对手入侵致数据泄露，涉及35名 affiliates 和208次谈判记录。仅8%的谈判成功支付赎金，赎金从2千到2百万美元不等，部分有折扣。比特币为主要支付方式。平均解密时间为4天左右。文章建议企业加强预防措施以减少风险。

Новая схема для тех, кто ищет импортные таблетки для животных.

关键词steam崩了⚠️ 当前故障详情（10月7日）崩溃表现全球登录异常：用户无法登录账号、游戏库加载失败，大