Aggregator

流媒体音乐平台 Spotify 宣布在全球多个地区提高订阅费用，欧洲部分市场的价格从每月 10.99 欧元上涨至 11.99 欧元。尽管分析师建议更频繁地涨价以增加收入，但 Spotify CEO 表示优先考虑长期留住订阅者而非短期收益。美国市场保持稳定，而其他地区如南亚、中东等则频繁调整价格。

Chief information security officers (CISOs) are continually tasked with understanding and deploying innovative solutions that reduce risk while increasing operational efficiency. As organizations expand their reliance on digital data and cloud-based infrastructures, the volume and complexity of security questionnaires have grown exponentially. In this environment, modernizing and streamlining these questionnaires is not simply about efficiency; […]

The post 2025 trends: Automating security questionnaires with open APIs first appeared on TrustCloud.

The post 2025 trends: Automating security questionnaires with open APIs appeared first on Security Boulevard.

A vulnerability was found in NVIDIA GPU Display Driver R535/R570/R575 on Windows. It has been classified as critical. Affected is an unknown function. The manipulation leads to use after free. This vulnerability is traded as CVE-2025-23281. It is possible to launch the attack on the local host. There is no exploit available.

A vulnerability classified as problematic has been found in NVIDIA GPU Display Driver R535/R570/R575 on Windows. Affected is an unknown function of the component Installer. The manipulation leads to files or directories accessible. This vulnerability is traded as CVE-2025-23276. Attacking locally is a requirement. There is no exploit available.

A vulnerability has been found in NVIDIA GPU Display Driver R575 on Linux/Windows and classified as critical. Affected by this vulnerability is an unknown functionality of the component Kernel Mode Driver. The manipulation leads to improper access controls. This vulnerability is known as CVE-2025-23277. Attacking locally is a requirement. There is no exploit available.

A vulnerability was found in NVIDIA GPU Display Driver R575 on Linux/Solaris and classified as critical. Affected by this issue is some unknown functionality of the component run Installer. The manipulation leads to time-of-check time-of-use. This vulnerability is handled as CVE-2025-23279. It is possible to launch the attack on the local host. There is no exploit available.

A vulnerability was found in NVIDIA GPU Display Driver R535/R570 on Linux. It has been classified as critical. This affects an unknown part of the component Virtual GPU Manager. The manipulation leads to stack-based buffer overflow. This vulnerability is uniquely identified as CVE-2025-23283. The attack needs to be approached locally. There is no exploit available.

A vulnerability, which was classified as critical, was found in NVIDIA GPU Display Driver R575 on Windows/Linux. This affects an unknown part. The manipulation leads to improper validation of array index. This vulnerability is uniquely identified as CVE-2025-23278. An attack has to be approached locally. There is no exploit available.

A vulnerability, which was classified as critical, has been found in Brave Conversion Engine Pro Plugin up to 0.7.7 on WordPress. This issue affects some unknown processing. The manipulation leads to improper authentication. The identification of this vulnerability is CVE-2025-7710. The attack may be initiated remotely. There is no exploit available.

A vulnerability classified as problematic has been found in Ocean Social Sharing Plugin up to 2.2.1 on WordPress. This affects an unknown part. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2025-7500. It is possible to initiate the attack remotely. There is no exploit available.

TP-Linkが提供するルーターArcher C50には、ハードコードされた暗号鍵使用の脆弱性が存在します。

A vulnerability was found in Xorux LPAR2RRD 8.04 and classified as critical. Affected by this issue is some unknown functionality of the component Perl Module Handler. The manipulation leads to path traversal: '../filedir'. This vulnerability is handled as CVE-2025-54769. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability was found in 9001 copyparty up to 1.18.6. It has been classified as problematic. This affects an unknown part of the file /?ru. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2025-54589. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

HackerNews 编译，转载请注明出处： 法国时尚巨头香奈儿成为Salesforce数据窃取攻击的最新受害者。据《女装日报》率先报道，香奈儿表示威胁行为者通过第三方服务提供商入侵其数据库，事件于7月25日首次被发现。此次泄露仅影响美国客户，涉及个人联系信息。 香奈儿发言人声明：“调查显示，未经授权的外部方仅获取了美国客户服务中心部分联系人的有限信息——具体包括姓名、电子邮箱、邮寄地址和电话号码。数据库未包含其他信息，受影响客户已获告知。”尽管香奈儿未回应媒体问询且未透露第三方服务商名称，网络安全媒体BleepingComputer确认数据是从该公司Salesforce实例窃取。 此次攻击被归因于黑客组织ShinyHunters发起的Salesforce数据窃取攻击浪潮。据Mandiant首次披露，攻击者通过语音钓鱼（vishing）攻击定向入侵Salesforce客户：诱骗员工授权恶意OAuth应用或窃取凭证访问其Salesforce门户。一旦侵入系统，便窃取数据库并以此勒索客户。 Salesforce向BleepingComputer强调其平台未被攻破，问题源于客户账户遭社工攻击：“Salesforce自身无安全漏洞，事件均由钓鱼攻击和社交工程导致。我们持续建议客户启用多因素认证（MFA）、实施最小权限原则并严格管理关联应用。”截至目前，攻击者尚未公开泄露任何企业数据，仅通过电子邮件实施勒索。 除香奈儿外，此轮攻击的受害者还包括阿迪达斯、澳洲航空、安联人寿，以及LVMH集团旗下路易威登、迪奥和蒂芙尼。BleepingComputer知悉其他未公开的潜在受害企业，但尚未能独立核实。       消息来源：bleepingcomputer； 本文由 HackerNews.cc 翻译整理，封面来源于网络； 转载请注明“转自 HackerNews.cc”并附上原文

文章描述了一个网络错误代码（521），该代码由Cloudflare生成，表示Web服务器无法处理请求或暂时不可用。

HackerNews 编译，转载请注明出处： 乌克兰国防部情报总局（HUR）宣称成功入侵俄罗斯占领的克里米亚地区政府服务器，获取了俄方强制迁移乌克兰儿童的确凿证据。该机构上周表示，已掌握数千份被转移儿童的身份文件，包括：无监护人看护儿童的个人信息、任命俄罗斯公民作为其新法定监护人的法律文书，以及儿童被转移后的安置地址。 这些数据已移交乌克兰执法部门审查，并将纳入正在进行的刑事诉讼程序。HUR发言人安德烈·尤索夫声明：“相关信息将协助我们寻回被绑架儿童，并追究责任方。”据乌克兰官方“战争儿童”数据库统计，自战争爆发以来，已有近2万名乌克兰儿童被强行带至俄罗斯或其占领区。官员警告实际数字可能更高。 HUR未明确具体入侵的服务器，但泄露文件似乎来源于辛菲罗波尔地区当局——该地区属于2014年被俄非法吞并、仍获国际社会广泛承认为乌克兰领土的克里米亚半岛。文件真实性暂无法独立核实，克里米亚当局也未就泄露事件公开置评。此前HUR曾声称对俄罗斯最大航空公司、军用无人机供应商及国有飞机制造商发动网络攻击。 此次针对克里米亚政务系统的网络行动，疑似由相对神秘的黑客组织Kiberkorpus协同完成。该组织自称隶属HUR，并在Telegram频道披露攻击细节。其由IT专家在战争爆发后组建，宣称使命为“在敌方网络空间收集情报并执行任务”。HUR未公开回应与该组织的关系。据当地媒体报道，Kiberkorpus此前曾宣称对克里米亚电信基础设施实施攻击，导致部分服务中断。 在过往行动中，HUR表示曾与BO Team、Blackjack等亲乌黑客组织合作。这些组织虽声称独立运作，但研究人员认为其与政府机构存在关联。       消息来源：therecord； 本文由 HackerNews.cc 翻译整理，封面来源于网络； 转载请注明“转自 HackerNews.cc”并附上原文

文章介绍了错误代码521的原因及其解决方法，帮助用户快速排查和修复网络连接问题。

美光推出全球首款PCIe 6.0数据中心固态硬盘Micron 9650，顺序读取速度达28,000MB/s，随机读取性能为5.5M IOPS。专为AI和高性能负载设计，支持液体冷却以提升散热效率。

伪装成Foxmail银狐最新高级免杀样本分析

当前环境出现异常状态，需完成验证后方可继续访问服务。