Aggregator

WordPress wp2shell Exploitation Grows as Public Exploit Fuels Mass Scanning

The Hackers News
2 weeks 2 days ago
Attackers have begun to exploit two critical vulnerabilities in WordPress that, when combined together, enable unauthenticated remote code execution (RCE) and complete compromise of vulnerable websites. The two security flaws, tracked as CVE-2026-63030 and CVE-2026-60137, have been codenamed wp2shell. "By the early hours of Saturday morning (UTC), successful exploitation was already well
The Hacker News

Hackers Exploit SonicWall SMA Zero-Days to Gain Root Access and Deploy ORANGETAIL Webshell

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
2 weeks 2 days ago

An ongoing exploitation of two zero-day vulnerabilities in SonicWall Secure Mobile Access (SMA) devices. These vulnerabilities allowed a threat actor, identified as UTA0533, to gain root-level access, install persistent malware, and deploy the ORANGETAIL Java webshell on vulnerable VPN appliances. The affected SonicWall SMA models include the 1000 series, specifically models 6210, 7210, and 8200. […]

The post Hackers Exploit SonicWall SMA Zero-Days to Gain Root Access and Deploy ORANGETAIL Webshell appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Divya

中国考虑收紧对AI模型和芯片的出口管控

不安全
2 weeks 2 days ago
中国考虑收紧对AI模型和芯片的出口管控中国监管机构正在考虑收紧对AI和半导体技术的出口管控。两位参与相关讨论的人士透露，由中国商务部牵头的监管机构已开始与领先的本土AI和芯片制造企业商讨如何防止西方得

欧盟对阿里巴巴罚款 5.5 亿欧元

Solidot
2 weeks 2 days ago
欧盟委员会对阿里巴巴旗下面向消费者的电商平台 AliExpress 处以 5.5 亿欧元的罚款，原因是它在打击非法商品销售上做得不够——这是根据 Digital Services Act（DSA）开出的最高罚单。布鲁塞尔去年曾警告 AliExpress，它在阻止平台上的卖家兜售非法商品以及确保其推荐引擎不推广这些非法商品上做得不够。欧盟委员会根据 DSA 要求其整改，并详细列出了需要采取的措施。一年后，欧盟委员会认定 AliExpress 的措施不足，宣布处以巨额罚款。委员会认为，AliExpress 未能妥善评估其是否有足够的人员审查潜在的非法产品，也未能充分评估其推荐和广告系统如何加剧非法产品的扩散。DSA 允许对商家处以全球营业额最高 6% 的罚款，阿里巴巴集团截至 3 月 31 日的财年收入为 1480 亿美元。布鲁塞尔原本可要求近 90 亿美元的罚款。

Managed ad