Aggregator

/r/netsec 是一个由社区管理的信息安全技术聚合平台，旨在从大量信息中筛选出有价值的内容，为安全从业者、学生、研究人员和黑客提供帮助。

区块链在政府、军工、医疗领域应用加速，抗DDoS与情报共享优势显著，但51%攻击、端点风险与成本制约其发展。

由于环境异常，需完成验证后才能继续访问。

用户因Snapchat账户被黑、邮箱被 hacking且无法重新注册相同邮箱而无法恢复账户。旧手机号码仍与WhatsApp绑定但无法接收验证码。多次联系Snapchat未果。急需访问账户以获取已故宠物猫的照片和视频。

Теперь даже проводник Windows работает против вас.

The cyber threat group APT-C-36, widely known as Blind Eagle, has been orchestrating sophisticated cyberattacks targeting a range of sectors across Latin America, with a pronounced focus on Colombian organizations. This group has consistently zeroed in on government institutions, financial organizations, and critical infrastructure, exploiting vulnerabilities with a blend of technical prowess and social engineering. […]

The post APT-C-36 Hackers Launching Cyberattacks on Government Entities, Financial Sectors, and Critical Systems appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Jeff Mahony提出创业应避免强行改变消费者行为，专注于解决实际问题和有机增长。他强调多样性在团队中的重要性，并认为真正的价值在于提供可持续的服务和产品。这种方法有助于提高成功率并实现长期影响。

Ahold Delhaize遭遇勒索软件攻击，导致224万多人的个人、财务和健康信息被盗。此次攻击于2024年11月6日影响其美国系统，泄露数据包括姓名、联系方式、身份证号、银行账户及医疗记录等信息。

This new CitrixBleed lookalike flaw is being exploited in the wild to gain initial access, according to ReliaQuest

Ahold Delhaize, one of the world's largest food retail chains, is notifying over 2.2 million individuals that their personal, financial, and health information was stolen in a November ransomware attack that impacted its U.S. systems. [...]

❤致TSRC的英雄们❤这份盛夏专项众测邀请函，约你共赴一场夏日约会。3重福利，赏金多多，专为英雄准备。

当前环境出现异常问题，需完成验证后才能继续访问。

以伊冲突彰显“字节和叙事”在战争中与“炸弹和导弹”同等重要

最近一起针对意大利数字身份系统SPID用户的钓鱼攻击被曝光。攻击者通过伪造的域名和紧急邮件诱骗用户提供敏感信息，包括凭证、身份证件副本及面部识别视频。这些数据被恶意收集用于身份盗窃或非法访问服务。

国产漏洞管理新方案！ 针对漏洞信息碎片化、共享难、扫描弱困境，摄星玄猫推出国产产品安全漏洞数据集。通过统一命名、整合漏洞、智能标记，实现高效管理，提升安全运营与供应链风险管控，护航国产化。

A vulnerability has been found in Foswiki up to 1.1.6 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to numeric error. This vulnerability is known as CVE-2012-6330. The attack can be launched remotely. Furthermore, there is an exploit available.

A vulnerability classified as problematic was found in Linux Kernel up to 6.12.23/6.13.11/6.14.2/6.15-rc1. Affected by this vulnerability is the function dmam_free_coherent. The manipulation leads to allocation of resources. This vulnerability is known as CVE-2025-37837. The attack needs to be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

安全运营已经具备广泛且成熟应用的条件，成为组织数字化转型的有力保障，支撑数字化业务发展。但什么样的安全运营才能真正符合数字化组织的需求，才能够有效的帮助组织完成安全目标、体现安全运营的真正价值，这是摆在产业界面前的一道必答题。

Система растёт быстрее, чем её пытаются разрушить.

当前环境出现异常，需完成验证后才能继续访问。