Aggregator

A vulnerability was found in HPE OneView for VMware vCenter up to 11.6. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to improper privilege management. The identification of this vulnerability is CVE-2025-37101. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Enterprise MFA TFA on Drupal. Affected by this vulnerability is an unknown functionality. The manipulation leads to authentication bypass using alternate channel. This vulnerability is known as CVE-2025-6675. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

这是一个开放的黑客社区，在Reddit上创建，旨在帮助新手成长为地下技能领域的资深人士。用户可以提问、回答问题并学习相关知识。该社区还提供Discord服务器链接（https://discord.gg/ep2uKUG），供成员交流和互动。

近期，筑梦岛App等AI（人工智能）聊天软件因虚拟角色互动生成低俗擦边等违规内容，危害未成年人身心健康，被网信部门约谈整改。相关新闻再次提醒我们，在享受AI技术带来便利的同时，也要警惕其在未成年人保护方面可能产生的负面影响。

数据要素是建设数字中国、实现数字化转型升级的战略性资源。摸清我国数据资源的规模、结构与发展趋势等基本盘，剖析数据在生产、存储、计算、流通和应用等各环节的基本面，对于我国进一步推动数据价值释放、形成数据产业具有重要作用。

为增强经营主体诚信守法、合规经营意识，进一步明确底线规则，市场监管总局选取一批网络不正当竞争典型案例予以公布。

当前环境异常，请完成验证后继续访问。

当前环境异常，需完成验证后方可继续访问。

当前环境异常，需完成验证后才能继续访问。

随着政府部门积极拥抱人工智能并实施数字化转型，我们应高度关注DeepSeek私有化部署的安全管理，始终坚持稳中求进的总基调，落实“安全、可靠、可控”的总体要求，确保人工智能技术的健康发展，更好地服务于国家和人民。

当前环境出现异常状态，需完成验证后方可继续访问服务。

Tech Transparency Project warns Chinese-owned VPNs like Turbo VPN and X-VPN remain on Apple and Google app stores, raising national security concerns.

该漏洞已修复

当前环境出现异常情况，需完成验证后方可继续访问。

速修复

当前环境异常，需完成验证后继续访问。

A new campaign has been observed leveraging fake websites advertising popular software such as WPS Office, Sogou, and DeepSeek to deliver Sainbox RAT and the open-source Hidden rootkit. The activity has been attributed with medium confidence to a Chinese hacking group called Silver Fox (aka Void Arachne), citing similarities in tradecraft with previous campaigns attributed to the threat actor.

网络攻击活动利用虚假网站推广流行软件（如WPS Office、搜狗、深度求索），分发恶意软件（Sainbox RAT和Hidden rootkit），目标为中文使用者。该活动被怀疑与中国黑客组织银狐有关。