Aggregator

研究人员发布了针对FunkSec勒索软件的免费解密器，使受害者能够恢复加密文件。该勒索软件于2024年底出现，使用Rust编写，并利用AI工具开发。其运营与支持巴勒斯坦的黑客活动有关。

Researchers have released a decryptor for the ransomware FunkSec, allowing victims to recover their encrypted files for free. Researchers at Avast developed a decryptor for the FunkSec ransomware. Gen Digital researchers released a decryptor for the FunkSec ransomware after cooperating with law enforcement to neutralize the threat. “Researchers at Avast developed a decryptor for the […]

近日，英伟达算力芯片被曝出存在严重安全问题。国家互联网信息办公室于2025年7月31日约谈了英伟达公司，要求英伟达公司就对华销售的H20算力芯片漏洞后门安全风险问题进行说明并提交相关证明材料。

澳大利亚周三表示，针对 16 岁以下儿童的社交媒体禁令覆盖的网站将包含 YouTube，不再豁免 Google 旗下的视频共享平台。这一决定是在监管机构的调查发现 37% 的未成年人报告了 YouTube 的有害内容，在所有社媒平台之间比例最高。儿童社媒禁令将于今年 12 月生效。YouTube 表示，澳大利亚 13 至 15 岁的儿童有近四分之三使用该平台，它不应该被归类为社媒平台，因为它主要托管视频，是一个视频共享平台，有大量高质量的内容库，用户越来越多的通过电视观看内容，它不是社交媒体。禁令覆盖的社媒平台 Meta Platforms、TikTok 和 Snap 则都表示 YouTube 和它们一样都使用算法根据用户活动推荐内容。

RedHook обчистит вас до копейки, а антивирус даже не заикнётся об угрозе.

A team of researchers has developed a new AI model, called White-Basilisk, that detects software vulnerabilities more efficiently than much larger systems. The model’s release comes at a time when developers and security teams face mounting pressure to secure complex codebases, often without the resources to deploy large-scale AI tools. A compact model with big results Unlike LLMs, which can require billions of parameters and heavy computational power, White-Basilisk is compact, with just 200 million … More →

The post New AI model offers faster, greener way for vulnerability detection appeared first on Help Net Security.

A vulnerability classified as problematic was found in JetBrains TeamCity. This vulnerability affects unknown code of the component agentPushPreset Page. The manipulation leads to cross site scripting. This vulnerability was named CVE-2025-54534. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Salesforce Tableau Server on Windows/Linux and classified as critical. Affected by this vulnerability is an unknown functionality of the component tabdoc API. The manipulation leads to path traversal. This vulnerability is known as CVE-2025-52452. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.14.8. It has been declared as problematic. This vulnerability affects the function device_shutdown of the component virtio. The manipulation leads to information disclosure. This vulnerability was named CVE-2025-38064. Access to the local network is required for this attack to succeed. There is no exploit available. It is recommended to upgrade the affected component.

图片：缅甸克钦地区稀土开采呈爆炸式增长，成为全球最大的稀土供应地。2025年7月，一则重磅消息震撼国际矿业圈

图：2025年7月，一架俄罗斯安-148军用客机（注册号RA-61735）降落平壤，成为疫情后俄朝之间罕见的军

A vulnerability classified as critical has been found in AI Engine Plugin 2.9.3/2.9.4 on WordPress. This affects the function rest_simpleFileUpload. The manipulation leads to unrestricted upload. This vulnerability is uniquely identified as CVE-2025-7847. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability was found in Customer Reviews for WooCommerce Plugin up to 5.80.2 on WordPress. It has been classified as problematic. Affected is an unknown function. The manipulation of the argument Author leads to cross site scripting. This vulnerability is traded as CVE-2025-5720. It is possible to launch the attack remotely. There is no exploit available.

作者投资4万美元启动无桩电动滑板车业务,获得城市运营许可并开发相关软件,但因城市突然撤走车辆,失去设备和软件支持,导致车辆闲置多年,现寻求重新编程或改装以恢复使用。

Он не оставляет следов. Не просит разрешения. Просто берёт.

Virtual CISO (vCISO) services have moved from niche to mainstream, with vCISO services adoption 2025 data showing a more than threefold increase in just one year. According to Cynomi’s 2025 State of the Virtual CISO report, 67% of MSPs and MSSPs now offer vCISO services, up from just 21% in 2024. This sharp increase aligns with the previous year’s predictions, when nearly three-quarters of non-adopters stated they planned to launch these services by the end … More →

The post AI is changing the vCISO game appeared first on Help Net Security.

A CVSS score 8.1 AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Muhammad Fadilullah Dzaki' was reported to the affected vendor on: 2025-07-31, 189 days ago. The vendor is given until 2025-11-28 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 8.8 AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Peter Girnus (@gothburz), Brandon Niemczyk of Trend Zero Day Initiative' was reported to the affected vendor on: 2025-07-31, 70 days ago. The vendor is given until 2025-11-28 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 6.1 AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H severity vulnerability discovered by 'oriotie' was reported to the affected vendor on: 2025-07-31, 26 days ago. The vendor is given until 2025-11-28 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Kevin Salapatek of Trend Research' was reported to the affected vendor on: 2025-07-31, 71 days ago. The vendor is given until 2025-11-28 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.