Aggregator

Most Compromises Trace to Financial Services, Healthcare, Professional Services
Data breaches rage on. In the first half of this year, the Identity Theft Resource Center counted 1,732 total data breaches affecting 166 million people, marking a rise in data breaches but a decline in victims, likely due to a drop in mega-breaches.

今日暂未更新资讯~
更多最新文章，请访问SecWiki

Чип размером с ноготь заменяет целую лабораторию.

YouTube 主播 Once Were Nerd 的视频内容主要围绕各种游戏主题，其中包括 Android 掌机如 Powkiddy 和 TrimUI，这些掌机内置了 SNES、Nintendo 64、PlayStation Portable、GameCube 等经典掌机的模拟器。随着硬件价格的下跌，玩家可以以 100 美元以内的价格购买到相当于升级版 PSP 或 GBA 的游戏机，因此它们变得非常受欢迎。然而模拟器是合法的，但模拟器使用的 ROM 文件很多情况下并不合法。Once Were Nerd 的内容引起了意大利版权执法部门的注意，今年四月金融警卫队（Guardia di Finanza）带着搜查令突袭了他的家。他的 Anbernic（扬立铭） 掌机相关视频被控是在宣传盗版材料，掌机预装了任天堂和索尼游戏的 ROM。执法部门扣押了他的 30 多台掌机。这些掌机基本上是中国公司制造的，因此超出了西方国家版权法的管辖范围。根据意大利的版权法， Once Were Nerd 因推广版权材料而面临最长三年监禁。

A critical vulnerability (CVE-2025-20337) in Cisco's Identity Services Engine (ISE) could be exploited to let an unauthenticated attacker store malicious files, execute arbitrary code, or gain root privileges on vulnerable devices. [...]

A sophisticated cyberattack campaign has emerged targeting organizations through Microsoft Teams impersonation, delivering the updated Matanbuchus 3.0 malware loader that serves as a precursor to ransomware deployment. Security researchers at Morphisec have identified instances where attackers successfully compromised systems by impersonating IT helpdesk personnel during external Teams calls, ultimately leading to the execution of malicious […]

The post Microsoft Teams Exploited to Deliver Matanbuchus Ransomware Payload appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Armenian national Karen Serobovich Vardanyan, 33, was extradited from Ukraine last month and now faces up to five years in prison for his role in Ryuk, prosecutors said on Wednesday.

Теперь ИИ знает, что вы опять открыли YouTube вместо работы.

A Ukrainian woman who survived a catastrophic cluster munition attack in 2014 continues to navigate the complex aftermath of severe combat-related injuries, highlighting the long-term humanitarian consequences of explosive ordnance use in populated areas. Nelya Leonidova, 34 at the time of the incident, sustained life-threatening polytrauma when submunitions detonated near a recreational area in Zugres, […]

The post Ukrainian Hackers Claim Cyberattack on Major Russian Drone Supplier appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Alleged Qilin Ransomware Attack on KEP Credit Union

NETSCOUT’s unwavering commitment to technological innovation has been recognized again by Frost & Sullivan, this time for cybersecurity best practices in the Middle East and North Africa (MENA) region. By integrating artificial intelligence (AI) and machine learning (ML) into the core cybersecurity strategy, NETSCOUT...

A new malware campaign uses GitHub to deliver payloads via Amadey botnet, bypassing email distribution

Alleged Sale of Zero-Day Exploit Targeting BUKTS Gas Pump Admin Panels

FortiGuard Labs researchers have uncovered a sophisticated cryptomining campaign where the H2Miner botnet, active since late 2019, has expanded its operations to target Linux, Windows, and containerized environments simultaneously. The campaign represents a significant evolution in cross-platform cryptocurrency mining attacks, with threat actors leveraging updated scripts and infrastructure to maximize financial gains from compromised systems. […]

The post H2Miner Targets Linux, Windows, and Containers to Illicitly Mine Monero appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

产品的持续迭代挺好玩

Реголит — главный ключ к захвату космоса?

A vulnerability, which was classified as problematic, has been found in PHPGurukul Art Gallery Management System 1.1. Affected by this issue is some unknown functionality of the file /admin/edit-art-medium-detail.php. The manipulation of the argument artmed leads to cross site scripting. This vulnerability is handled as CVE-2025-7767. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability classified as critical was found in code-projects Online Appointment Booking System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/addmanagerclinic.php. The manipulation of the argument clinic leads to sql injection. This vulnerability is known as CVE-2025-7765. The attack can be launched remotely. Furthermore, there is an exploit available.

A vulnerability classified as critical has been found in code-projects Online Appointment Booking System 1.0. Affected is an unknown function of the file /admin/deletedoctorclinic.php. The manipulation of the argument clinic leads to sql injection. This vulnerability is traded as CVE-2025-7764. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

A sophisticated espionage campaign targeting multiple Asian jurisdictions has emerged, utilizing weaponized shortcut files and deceptive social engineering techniques to infiltrate high-value targets across China, Hong Kong, and Pakistan. The threat actor, designated UNG0002 (Unknown Group 0002), has demonstrated remarkable persistence and technical evolution throughout two major operational phases spanning from May 2024 to the […]

The post UNG0002 Actors Deploys Weaponize LNK Files Using ClickFix Fake CAPTCHA Verification Pages appeared first on Cyber Security News.