Aggregator

Also: Ukrainian Hackers Find Evidence of Russian Child Abduction
This week, a Chinese duo arrested in Los Angeles for illegal artificial intelligence chip exports back to China, France extradited an accused Nigerian hacker, Ukraine hacked Crimean servers, Florida prison email leak, Tea App clone exposed users’ IDs.

4 Bugs Affecting at Least 6,500 Camera Servers Enable Pre-Auth Attacks on Devices
Researchers who uncovered four severe flaws in Axis Communications' video management and camera software say thousands of internet-connected surveillance systems are vulnerable to remote attacks. Attackers can execute arbitrary code without authentication.

即时零售行业蓬勃发展，在此生态下美团零售广告成为助力零售商家和品牌商扩大生意规模的重要驱动力。文章首先介绍了在全新业务模式“联合营销”场景下，首创的多协同方参竞拍卖机制算法——“集资拍卖”，然后梳理了集资拍卖在美团的技术发展路径和实践，围绕规则化集资拍卖、模型化集资拍卖、整体集资拍卖进行了展开，最后是一些总结，希望能对大家有所帮助或启发。

美团推出联合营销模式，允许品牌商和零售商共同出资投放广告，提升资源利用率和多方收益。通过创新设计的集资拍卖机制及系列算法优化广告分配与扣费，在实际应用中显著提升了广告效率及平台收入。

The concept of connecting large language models to external data sources is swiftly transitioning from experimental novelty to everyday practice. Today, ChatGPT is capable not only of engaging in conversation, but also of interacting...

The post Your Data Is Not Safe: The ‘AgentFlayer’ Attack That Steals Secrets From ChatGPT appeared first on Penetration Testing Tools.

toxssin toxssin is an open-source penetration testing tool that automates the process of exploiting Cross-Site Scripting (XSS) vulnerabilities. It consists of an https server that works as an interpreter for the traffic generated by...

The post toxssin: POST-XSS exploitation tool appeared first on Penetration Testing Tools.

This daily article is intended to make it easier for those who want to stay updated with my regular Dark Web Informer and X/Twitter posts.

Key Takeaways Understanding the CMMC Final Rule: Why It Matters Now For years, the Cybersecurity Maturity Model Certification (CMMC) has been discussed as a future requirement for defense contractors. But until recently, it served as a framework under development, not enforceable by law. That changed in October 2024, when the Department of Defense (DoD) published […]

The post CMMC Final Rule: Clear Steps for DoD Contractors appeared first on Centraleyes.

The post CMMC Final Rule: Clear Steps for DoD Contractors appeared first on Security Boulevard.

Threat Attack Daily - 7th of August 2025

今天给大家推荐AI推理加速和适配工具：硅基流动。目前已有上千万用户在使用其产品。

Air France and KLM warn of a data breach exposing customer data via unauthorized access to a third-party platform. Air France and KLM reported a data breach after hackers accessed a third-party platform, potentially exposing some customers’ personal information. Both airlines confirmed that threat actors gained access to the platform of an unnamed service provider […]

Two malicious NPM packages posing as WhatsApp development tools have been discovered deploying destructive data-wiping code that recursively deletes files on a developer's computers. [...]

Ransomware Attack Update for the 7th of August 2025

The NetBSD team has officially announced the commencement of preparations for the release of version 11: a dedicated code branch has been created, and the project has now entered the phase of active testing....

The post NetBSD 11: The OS That Never Forgets Your Old Hardware appeared first on Penetration Testing Tools.

Following on from our preview, here's Ben Gelman and Sean Bergeron's research on enhancing command line classification with benign anomalous data

Cybercriminals have begun exploiting Scalable Vector Graphics (SVG) files as sophisticated attack vectors, transforming seemingly harmless image files into potent phishing weapons capable of executing malicious JavaScript on Windows systems. This emerging threat leverages the XML-based structure of SVG files to embed and execute malicious scripts when opened in default web browsers, bypassing traditional security […]

The post Hackers Weaponizing SVG Files With Malicious Embedded JavaScript to Execute Malware on Windows Systems appeared first on Cyber Security News.

A vulnerability was found in NetApp SAN Host Utilities up to 7.x on Windows. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Installer. The manipulation leads to Local Privilege Escalation. This vulnerability is known as CVE-2025-26513. An attack has to be approached locally. There is no exploit available. It is recommended to upgrade the affected component.

While no sensitive financial data like credit card information was compromised, the threat actors were able to get away with names, email addresses, phone numbers, and more.

Security startups of all stripes submitted applications for Black Hat USA's Startup Spotlight. Prime Security won with its AI security architect platform.