Grave vulnerabilità nel plugin Forminator di WordPress: oltre 600.000 siti a rischio
Una grave vulnerabilità sta mettendo in allarme la comunità di WordPress, con oltre 600.000 siti web a rischio a causa di una falla nel plugin Forminator. L’exploit, identificato con il codice CVE-2025-6463, è stato classificato con un indice di gravità di 8.8 su 10 secondo il sistema CVSS, evidenziando il suo elevato grado di pericolosità.
Questa falla sfrutta una combinazione di debolezze nel sistema di validazione dei campi e nella logica di eliminazione dei file. Gli attaccanti possono utilizzarla per forzare l’eliminazione del file wp-config.php, un elemento essenziale per la configurazione di WordPress. Una volta eliminato, il sito viene riportato alla fase di installazione iniziale, consentendo ai malintenzionati di collegarlo a un database sotto il loro controllo e ottenere il pieno accesso al sito.
Secondo i dati ufficiali di WordPress.org, il plugin Forminator è attualmente utilizzato da oltre 600.000 siti attivi in tutto il mondo. Sebbene sia stata rilasciata una patch correttiva nella versione 1.44.3, il numero di download dell’aggiornamento – circa 200.000 – suggerisce che molti siti rimangono vulnerabili. Questa discrepanza sottolinea la lentezza con cui molti amministratori di siti web affrontano le questioni di sicurezza, aumentando il rischio di compromissione.
ilsoftware.it/grave-vulnerabil…
Grave vulnerabilità di un plugin WordPress: oltre 600.000 siti a rischio
Il plugin WordPress Forminator presenta una vulnerabilità critica (CVE-2025-6463). Scopri come proteggere il tuo sito e prevenire attacchi.Riccardo Palermo (ilsoftware.it)
Libya: How the West Destroyed a Prosperous Country and Plunged It into Chaos
Libya: How the West Destroyed a Prosperous Country and Plunged It into Chaos
Tripoli in Flames – A New Spiral of Chaos: How the May 2025 Fighting Worsened the Crisis in Libya. A year has passed since Libya’s capital, Tripoli,Mohammed ibn Faisal al-Rashid (New Eastern Outlook)
'Death to the IDF' is not antisemitic. Reserve your outrage for Israeli crimes in Gaza
Bob Vylan's performance at Glastonbury has sparked condemnation, but UK guilt for complicity in genocide is driving this hysteria about punk bands
☆ Yσɠƚԋσʂ ☆ likes this.
Arrivano nuovi link profilo per SimpleX
da simplex.chat/blog/20250703-sim…
SimpleX Chat ha risolto un grosso problema: prima era difficilissimo aggiungere nuovi contatti perché bisognava condividere link lunghissimi e complessi che sembravano quasi dei virus o comunque dei link poco sicuri.
Ora hanno creato link corti e semplici e facili da mostrare anche tramite codice QR e puoi vedere subito chi stai aggiungendo prima di iniziare a chattare.
SimpleX Chat: private and secure messenger without any user IDs (not even random)
SimpleX Chat - a private and encrypted messenger without any user IDs (not even random ones)! Make a private connection via link / QR code to send messages and make calls.simplex.chat
like this
Patti Smith - Banga (2012)
Tirando in ballo il cane di Ponzio Pilato chiamato "Banga" (dal libro "Il maestro e Margherita" di Bulgakov), la nostra sacerdotessa del rock pubblica il suo undicesimo album. Disco di inediti (a parte un brano) che esce a otto anni da Trampin' e a cinque da Twelve, album di solo cover... Leggi e ascolta...
'Death to the IDF' is not antisemitic. Reserve your outrage for Israeli crimes in Gaza
'Death to the IDF' is not antisemitic. Where is the outrage over Israeli crimes in Gaza?
Bob Vylan's performance at Glastonbury has sparked condemnation, but UK guilt for complicity in genocide is driving this hysteria about punk bandsMiddle East Eye
FundMECFS likes this.
'I've been turned into an AI train announcer - and no one told me'
- YouTube
Profitez des vidéos et de la musique que vous aimez, mettez en ligne des contenus originaux, et partagez-les avec vos amis, vos proches et le monde entier.www.youtube.com
Luca likes this.
Banda larga satellitare, SatCo verso il debutto: Vodafone protagonista della nuova sfida europea
Tlc satellitari, SatCo di Vodafone parte nel 2026 dal Lussemburgo
Tlc satellitari, Vodafone e AST SpaceMobile lanciano SatCo per la connettività verso smartphone: debutto nel 2026 e sede in Lussemburgo.Veronica Balocco (Corriere Comunicazioni)
Trump’s Defiance of TikTok Ban Prompted Immunity Promises to 10 Tech Companies
FOIA.
The Justice Department is advancing a radical theory of presidential power, nullifying Congress’s foreign affairs powers whenever the president finds them inconvenient.These letters provide a legal rationale (if it can be called that) for the Trump administration’s commitment not to enforce the Protecting Americans from Foreign Adversary Controlled Applications Act (PAFACAA), the divestment-or-ban law that the Supreme Court upheld in January. The letters make two central claims, both of which are astonishing in their breadth and implications for executive power.
- Akamai Technologies
- Amazon
- Apple Inc.
- Digital Realty Trust, Inc.
- Fastly, Inc.
- Google, Inc.
- LG Electronics USA, Inc.
- Microsoft Corporation
- Oracle Corporation
- T-Mobile US, Inc.
Trump’s Defiance of TikTok Ban Prompted Immunity Promises to 10 Tech Companies
FOIA.
The Justice Department is advancing a radical theory of presidential power, nullifying Congress’s foreign affairs powers whenever the president finds them inconvenient.These letters provide a legal rationale (if it can be called that) for the Trump administration’s commitment not to enforce the Protecting Americans from Foreign Adversary Controlled Applications Act (PAFACAA), the divestment-or-ban law that the Supreme Court upheld in January. The letters make two central claims, both of which are astonishing in their breadth and implications for executive power.
- Akamai Technologies
- Amazon
- Apple Inc.
- Digital Realty Trust, Inc.
- Fastly, Inc.
- Google, Inc.
- LG Electronics USA, Inc.
- Microsoft Corporation
- Oracle Corporation
- T-Mobile US, Inc.
Thanks to the "you need to buy a new PC for running W11" bullshit, scammers are selling ewaste at full price to inexperienced people
And from the glowing reviews it's clear that
- W11 doesn't actually need a new PC to run and the limitations are completely artificial
- For many people, a ten years old PC is fast enough (or even faster than a brand new Intel N100 PC that is officially W11 compatible). They won't even notice that's something from 2015, as long it has a shiny new case, enough RAM and SSD
- Amazon doesn't care that the PC comes with pirated software, or that someone is scamming their customers, as long they get their 15% cut from marketplace sales (the cost of a genuine license of W11 pro and office exceeds the price of those ewaste specials)
thisisbutaname likes this.
don't like this
Could you explain why you consider these overpriced/scam? If those use new parts and come with warranty, at least the top one, seems fine. Can you do a breakdown of what it should cost?
My Windows PC has i5-6500 in it and I definitely don't consider it e-waste.
I call it ewaste because it is coming from that. Banks and corporations change computers every 3-5 years because accounting love to lease rather to buy
Those computers go to ewaste centers, then some not honest sellers take the components (that usually were left on 24/7 because in offices nobody bothers to turn off computers) and put them in brand new cases
That's why is a scam, selling old stuff that came from an ewaste center as brand new
But "e-waste" means something so outadet that it's useless. Or unrepairable. Those computers are perfectly fine for 80% of users.
And are they explicitly saying that these are new? While you know for sure it's heavily used equipment?
But are you certain they aren't new and this is a scam? I'm interested to know how you determined those are used.
Btw, where does it say "Nuovo"? I can't find it. Is it not on the screenshot?
So keeping it from being actual ewaste it's now going to be used by someone... That seems like a good thing.
The only downside I see is that it isn't disclosed
My gripe with that is that the seller is scamming inexperienced people, they think that they are buying a brand new PC while instead it's not
(The fact that a 400 euro PC includes 600 euro of software licenses should ring a bell about the legitimacy to the buyer, though)
It is unrealistic that parts with that age are brand new, available in that quantity. It might happens that some distributor misplaces some box and a couple computers are old new stock after a decade, but hundreds?
Also: W11 pro OEM is 120 euro and office 365 perpetual doesn't even exist, and if they meant office 2024 home and business is 299 euro. 120+299 exceed the listing price
Banks and corporations change computers every 3-5 years because accounting love to lease rather to buy
3-5 years is a pretty standard depreciation schedule for IT equipment like computers, peripheral accessories etc.
Computers and laptops (using Straight-line method): 31.67% with a useful life of 3 years.
Computers and laptops (using Written Down Value method): 63.16% with a useful life of 3 years
It really has nothing to do with leasing vs. buying.
Yes ok from an accounting point of view.
But from a functional point of view?
I see how my bank teller works: they connect to a terminal server
I see how my other bank works: a VM that runs AS/400 that is acting as a terminal to their mainframe
Why they're changing computers so often? The first one can use any PC released in the past 15 years and the second one can use any released in the past 30 years
World Health Organization (WHO) launches bold push to raise health taxes and save millions of lives
The “3 by 35” Initiative targets tobacco, alcohol, and sugary drinks to cut deaths and boost health and development fundingThe World Health Organization (WHO) today has launched a major new initiative urging countries to raise real prices on tobacco, alcohol, and sugary drinks by at least 50% by 2035 through health taxes in a move designed to curb chronic diseases and generate critical public revenue. The “3 by 35” Initiative comes at a time when health systems are under enormous strain from rising noncommunicable diseases (NCDs), shrinking development aid and growing public debt.
The consumption of tobacco, alcohol, and sugary drinks are fueling the NCD epidemic. NCDs, including heart disease, cancer, and diabetes, account for over 75% of all deaths worldwide. A recent report shows that a one-time 50% price increase on these products could prevent 50 million premature deaths over the next 50 years.
item
The World Health Organization (WHO) today has launched a major new initiative urging countries to raise real prices on tobacco, alcohol, and sugary drinks by at least 50% by 2035 through health taxes, in a move designed to curb chronic diseases and g…www.who.int
Gaza aid contractor tells BBC he saw colleagues fire on hungry Palestinians
Gaza aid contractor tells BBC he saw colleagues fire on hungry Palestinians
The Israel- and US-backed Gaza Humanitarian Foundation has strongly denied the allegation.Lucy Williamson (BBC News)
Judge: You can’t ban DEI grants without bothering to define DEI
Judge: You can’t ban DEI grants without bothering to define DEI
A written ruling details why a judge restored funding for many NIH grants.John Timmer (Ars Technica)
Big Tech Execs Commissioned into the Army [16:52 | JUL 03 2025 | Glenn Greenwald]
cross-posted from: lemmy.world/post/32434347
Skip Timestamps and Generated Summary below:Skip Timestamps:
- 0:00.000 - 0:06.250 Intermission
- 14:21.000 - 16:26.000 Sponsor
Generated Summary:
Main Topic: The increasing integration of Big Tech companies with the US government and military, specifically focusing on the commissioning of tech executives into the Army Reserve.
Key Points:
- Tech Execs Joining the Army: Executives from Meta, OpenAI, and Palantir are joining the US Army Reserve as part of a new "Innovation Corps" (Detachment 2011) to bring tech upgrades to the military.
- Motivations: The tech executives cite patriotism and a desire to equip the military for conflicts with high-tech adversaries like China. The speaker suggests the tech sector will also profit from this arrangement.
- Fascism Analogy: The speaker draws a parallel to fascism, where there is no separation between the public and private sectors, and corporations and the government work together for the same goals.
- Debunking the "Aversion" Myth: The speaker refutes the idea that Silicon Valley was previously averse to working with the military, citing examples like the Snowden revelations and existing contracts between tech companies and intelligence agencies (CIA, NSA).
- Historical Context: The speaker references John Poindexter and Palantir's origins, highlighting the long-standing relationship between Silicon Valley and the intelligence community.
- Alarming Language: The speaker finds the language used by the tech executives about uniting American innovation with the military's mission to be alarming, echoing the core tenet of fascism.
- Eisenhower's Warning: The speaker invokes Dwight Eisenhower's warning about the militarization of American life, suggesting that this integration is a realization of that warning on a grander scale.
Highlights:
- The commissioning of tech executives into the Army Reserve is presented as a significant development, symbolizing the deepening ties between Big Tech and the US military.
- The speaker emphasizes the potential dangers of this integration, drawing parallels to fascism and raising concerns about the erosion of the separation between corporate and state power.
- The historical context provided challenges the narrative of a recent shift in Silicon Valley's relationship with the military, revealing a long history of cooperation.
About Channel:
Independent, Unencumbered Analysis and Investigative Reporting, Captive to No Dogma or Faction.
Emerald Lake loop Yoho National Park, BC
Nature walk, 3.2 mi loop
406 ft
Hiked 6/5/25
An extremely popular lake in Yoho National Park, this nature walk can be done as a full loop or shortened to near nothing and still be enjoyable. Named for its vibrant color, Emerald lake is surrounded on all sides by stunning views of the local mountains, and serves as an access to several great larger hikes such as Yoho Pass/Yoho Lake.
Looking south across Emerald lake towards Mount Burgess which is reflected in the rippled water.
The view from the south side of Emerald lake showing the avalanche zone of Emerald peak, which was still closed due to avalanche risk at the time.
Looking north from Emerald lake shows the vast avalanche field and flood plains that feeds the lake. Carmar peak, Mt Marpole, and the ridge leading up to the President sit in the background.
La musica e il dilemma: che aspetto avrebbe avuto l'immortale Lady Greensleves? - Il blog di Jacopo Ranieri
La musica e il dilemma: che aspetto avrebbe avuto l'immortale Lady Greensleves? - Il blog di Jacopo Ranieri
Se c’è un aspetto che accomuna la conduzione degli affari monarchici contemporanea con gli albori dell’epoca Moderna ed almeno in parte, i lunghi anni del periodo medievale antistante, è il modo in cui la linea tra pubblico e privato cessino di avere…Jacopo (Il blog di Jacopo Ranieri)
China tells EU it cannot afford Russian loss in Ukraine war, sources say
Exclusive | China tells EU it cannot afford Russian loss in Ukraine war, sources say
Wang Yi tells top EU diplomat Beijing fears US shift of whole focus to China.Finbarr Bermingham (South China Morning Post)
[JS Required] The Locknet: How China Controls Its Internet and Why It Matters
The Locknet: How China Controls Its Internet and Why It Matters
June 30, 2025 The man gazes earnestly into the camera, the glow from his computer monitor reflecting off his black-rimmed glasses. “This is more than just a cultural moment,” he says with a smile. “It’s something truly meaningful.ChinaFile
[JS] The Locknet: How China Controls Its Internet and Why It Matters
The Locknet: How China Controls Its Internet and Why It Matters
June 30, 2025 The man gazes earnestly into the camera, the glow from his computer monitor reflecting off his black-rimmed glasses. “This is more than just a cultural moment,” he says with a smile. “It’s something truly meaningful.ChinaFile
Large majority of French, German and Spanish public back tough EU stance on Big Tech, despite risk to Trump relations
Around half also believe Big Tech companies are more powerful than the EU
Large majority of French, German and Spanish public back tough EU stance on Big Tech, despite risk to Trump relations - People vs. Big Tech
Around half also believe Big Tech companies are more powerful than the EU Brussels, Belgium (3rd July 2025) - According to a new survey conducted byVanessa (People vs. Big Tech)
like this
Kilgore Trout doesn't like this.
Large majority of French, German and Spanish public back tough EU stance on Big Tech, despite risk to Trump relations
Around half also believe Big Tech companies are more powerful than the EU
Large majority of French, German and Spanish public back tough EU stance on Big Tech, despite risk to Trump relations - People vs. Big Tech
Around half also believe Big Tech companies are more powerful than the EU Brussels, Belgium (3rd July 2025) - According to a new survey conducted byVanessa (People vs. Big Tech)
Researchers finds high levels of dangerous air particles(PM2.5) in air near electric vehicle fast charging stations.
- At the charging stations, daily concentrations of dangerous air particles, known as PM2.5, ranged from 7.3 to 39.0 micrograms per cubic meter.
- Urban sites without fast-charging stations had concentrations of PM2.5 ranging from only 3.6 to 12.4 micrograms per cubic meter.
- The tiny particles likely come from particle resuspension around Direct Current Fast Charging power cabinets. Cooling fans designed to prevent the electronics from overheating can also stir up dust and particles from internal surfaces.
UCLA team finds high levels of particulates in air near electric vehicle fast charging stations
The study was conducted across Los Angeles County.UCLA Fielding School of Public Health (UCLA)
Researchers finds high levels of dangerous air particles(PM2.5) in air near electric vehicle fast charging stations.
- At the charging stations, daily concentrations of dangerous air particles, known as PM2.5, ranged from 7.3 to 39.0 micrograms per cubic meter.
- Urban sites without fast-charging stations had concentrations of PM2.5 ranging from only 3.6 to 12.4 micrograms per cubic meter.
- The tiny particles likely come from particle resuspension around Direct Current Fast Charging power cabinets. Cooling fans designed to prevent the electronics from overheating can also stir up dust and particles from internal surfaces.
UCLA team finds high levels of particulates in air near electric vehicle fast charging stations
The study was conducted across Los Angeles County.UCLA Fielding School of Public Health (UCLA)
“Guidare in America”
Non avevo troppo idea che guidare negli Stati Uniti fosse così… crazy… (e ormai questo è l’unico aggettivo che so usare per porre enfasi positiva, un po’ come i redditor che usano sempre e solo la parola “wholesome”, ma lasciamo stare…) ma a quanto pare quelli lì hanno fatto anche cose… non direi buone, però […]
Judge rejects executive order claiming ‘invasion’ at the border
A federal judge Wednesday ruled as unlawful an executive order by President Donald Trump that barred asylum by claiming an “invasion” at the southern border and the need to protect states.
“The President cannot adopt an alternative immigration system, which supplants the statutes that Congress has enacted,” District of Columbia U.S. District Judge Randolph Moss wrote in his opinion.
“Here, nothing in the (Immigration and Nationality Act) or the Constitution grants the President or his delegees the sweeping authority asserted in the Proclamation and implementing guidance,” continued Moss, who was appointed by former President Barack Obama.
The order from Moss also prevents the U.S. Department of Homeland Security from enforcing the executive order.
He also agreed to certify a class for potential asylum-seekers, which comes after last week’s Supreme Court ruling that curtailed nationwide injunctions from lower courts. Certifying a class was suggested by the court to give judges an avenue to make an order broader.
Bondi made changes to DOJ policy. Her former client Pfizer might have benefited
For the past several years, pharmaceutical giant Pfizer has been under investigation by the U.S. Department of Justice for potential foreign corruption violations related to its activities in China and Mexico, according to the company’s financial filings.
But that appears to have changed after the Trump administration tapped Pam Bondi — previously an outside legal counsel for Pfizer — to lead the Justice department as attorney general.
In the company’s most recent annual report, filed three weeks after Bondi took office in early February, there was no longer any reference to the Justice Department investigations into the company’s potential violation of the Foreign Corrupt Practice Act. A quarterly report in May also contains no reference to these investigations.
[JS] The Past, Present, and Future of Police Body Cameras
Artificial intelligence (AI) is reshaping the criminal justice system. Law enforcement agencies are using it to predict crime, expedite response, and streamline routine tasks. One of the most promising applications can be found in body camera programs, where AI is transforming unmanageable archives of footage into active sources of insight.AI can now analyze hundreds of hours of video in seconds. Early pilot programs suggest that these video-reviewing tools, when guided by human oversight, can uncover critical evidence that might otherwise be overlooked, reduce pretrial bottlenecks, and identify potential instances of officer misconduct. But these benefits come with risks. Absent clear guardrails, the same technologies could drift toward government overreach, blurring the line between public safety and state surveillance.
The line between public security and state surveillance lies not in technology, but in the policies that govern it. To responsibly harness AI and mitigate these risks, we recommend that agencies and policymakers:
- Establish and enforce clear use policies. Statewide rules for body camera use and AI governance ensure consistency across jurisdictions, particularly in areas like body camera activation, evidence sharing, and public disclosure.
- Pair technology with human oversight. AI should enhance—not replace—human decision-making. Final judgments must rest with trained personnel, supported by independent policy oversight from civilian review boards.
- Safeguard civil liberties. Safeguards must be in place to protect individual rights, limit surveillance overreach, and ensure data transparency. For example, limiting facial recognition during constitutionally protected activities like protests will help ensure AI is aligned with democratic ideals.
With the right guardrails in place, AI can elevate body cameras from after-action archival tools to always-on intelligence tools, informing decisions in the moment, when it matters most.
The Past, Present, and Future of Police Body Cameras - R Street Institute
Authors Table of Contents Media Contact For general and media inquiries and to book our experts, please contact: pr@rstreet.org The line between public security and state surveillance lies not in technology, but in the policies that govern it.R Street Institute
[JS Required] The Past, Present, and Future of Police Body Cameras
Artificial intelligence (AI) is reshaping the criminal justice system. Law enforcement agencies are using it to predict crime, expedite response, and streamline routine tasks. One of the most promising applications can be found in body camera programs, where AI is transforming unmanageable archives of footage into active sources of insight.AI can now analyze hundreds of hours of video in seconds. Early pilot programs suggest that these video-reviewing tools, when guided by human oversight, can uncover critical evidence that might otherwise be overlooked, reduce pretrial bottlenecks, and identify potential instances of officer misconduct. But these benefits come with risks. Absent clear guardrails, the same technologies could drift toward government overreach, blurring the line between public safety and state surveillance.
The line between public security and state surveillance lies not in technology, but in the policies that govern it. To responsibly harness AI and mitigate these risks, we recommend that agencies and policymakers:
- Establish and enforce clear use policies. Statewide rules for body camera use and AI governance ensure consistency across jurisdictions, particularly in areas like body camera activation, evidence sharing, and public disclosure.
- Pair technology with human oversight. AI should enhance—not replace—human decision-making. Final judgments must rest with trained personnel, supported by independent policy oversight from civilian review boards.
- Safeguard civil liberties. Safeguards must be in place to protect individual rights, limit surveillance overreach, and ensure data transparency. For example, limiting facial recognition during constitutionally protected activities like protests will help ensure AI is aligned with democratic ideals.
With the right guardrails in place, AI can elevate body cameras from after-action archival tools to always-on intelligence tools, informing decisions in the moment, when it matters most.
The Past, Present, and Future of Police Body Cameras - R Street Institute
Authors Table of Contents Media Contact For general and media inquiries and to book our experts, please contact: pr@rstreet.org The line between public security and state surveillance lies not in technology, but in the policies that govern it.R Street Institute
Republican FCC scraps ban on prison phone price gouging, a gift to some of his big donors
The Federal Communications Commission will no longer enforce a rule capping the price of prison phone calls, according to an announcement made Monday by FCC Chairman Brendan Carr.
The move suspends a 2024 FCC decision that capped the price of in-state phone calls at 6 cents minute for prisons and large jails and 7 cents per minute for medium-sized jails. Before the decision, a 15-minute phone call could cost as much as $11.35 at large jails in some states. Under the 2024 rules, those same phone calls would cost 90 cents.
Trump’s FCC scraps ban on prison phone price gouging, a gift to some of his big donors
And another steep tax on some of America's poorest families.Mother Jones
adhocfungus likes this.
dwindling7373
in reply to LadyButterfly she/her • • •Damage likes this.