Aggregator

A threat actor using the alias Sensitive2025 is advertising a database they claim to have stolen from Loja Negócios Digital (lojanegociosdigital.com.br), a Brazilian online store.

反人工智能字体Anti-AI Fonts 随着人工智能在在线文本阅读方面的能力越来越强，人们越来越关注如何保护信息和知识产权免受其侵害。反人工智能字体可以帮助模糊图像中的文本，确保只有人类才能阅读原本应该发送给人类的信息。 Decoy Font 是Mixfont众多探索此理念的实验项目之一。 什么是诱饵字体（Decoy Font）？ 诱饵字体是一种为每个字母打印一个诱饵的字体，这使得人工智能更难识别你输入的内容。这种字体的工作原理是利用不同的空间频率在同一空间中呈现两个不同的字母。前景包含细细的轮廓，而背景则是一个模糊的低频色块。当两者叠加在一起时，你看到的内容取决于你观察字母的角度。如果你难以看清隐藏的信息，可以尝试将屏幕移远一些，或者眯起眼睛仔细观察。 大多数人工智能系统通过近距离读取图像像素来工作。因此，当这类图像被粘贴到像 ChatGPT 这样的人工智能模型中时，即使文字很小，逻辑学习模型（LLM）也会将注意力集中在前景文字上，因为前景文字的轮廓最清晰。然而，从稍远的距离观察，就能看到隐藏的真正信息。这种简单的错觉足以欺骗像 GPT Sol 和 Gemini 3.5 这样更高级的逻辑学习模型，并运用 Thinking。 字体可免费商用，下载地址： https://www.mixfont.com/experiments/decoy-font 在这方面的另一项探索是Ghost Font，它也是一款反人工智能字体，通过动态效果隐藏信息。然而，Ghost Font 依赖动画来伪装信息，而 Decoy Font 则是一个直接的 TTF 字体文件，可以直接在项目中输入。 https://www.mixfont.com/ghost-font （一直在动，有兴趣自行进去看）图7 诱饵字体是一种有趣的隐藏信息的方法，但它并不能保证万无一失。拥有强大智能体和编码能力的模型或许能够识破初始字母，当然，经过一些简单的提示，某些智能体应该能够找到隐藏的字母。然而，诱饵字体仍然能够有效地迷惑人工智能，从而阻止网络爬虫或随意观察。

The president’s speech re-hashed debunked conspiracies around U.S. elections. Critics say the administration’s 18-month investigation into voter fraud has been a total failure. 

The post State officials, election experts pan Trump speech: ‘This is what desperation looks like’ appeared first on CyberScoop.

A vulnerability was found in osTicket 1.17.7/1.18.3. It has been declared as problematic. The impacted element is an unknown function of the component ticket management subsystem. Such manipulation leads to improper control of resource identifiers. This vulnerability is documented as CVE-2026-14871. The attack can be executed remotely. There is not any exploit available.

A vulnerability was found in Google Cloud Firebase Studio. It has been classified as problematic. The affected element is an unknown function. This manipulation causes missing authentication. This vulnerability is registered as CVE-2026-12715. Remote exploitation of the attack is possible. No exploit is available.

危地马拉舒尔通玛雅遗址一面墙壁上镌刻的数学公式，让学界首次确认了一位重要的玛雅数学家兼天文学家的真实姓名。研究团队指出，这位名为 Sak Tahn Waax（意为“白胸狐狸”）的学者足以比肩人类历史上的数学巨匠。 墙壁绘有人物画像与象形文字，其中包含基于天文历法的精密数学运算。玛雅人曾依靠这些运算确定国王登基等重大仪式的举办时间。研究团队重点分析了编号为“19号文本”的一组象形文字。“19号文本”是一组呈L形排布的11个象形文字，整体高度约10厘米。研究发现，前 9 个象形文字完整记录了玛雅历法与天文周期的换算逻辑。这套公式破解了一个2920 天周期的拆分规律，可适配玛雅各类历法单位。2920 天是玛雅文明的核心天文周期，完美契合5个金星周期（每周期584天）与8个太阳年（每周期365天）。不仅如此，该运算还将2920天与乌伊纳尔（每月20日）、卓尔金历（260天神圣历法）、通年（每年360天）以及780天火星周期建立了精准数理关联。 团队在“19号文本”倒数第二个符号中破译出“如是说”的句式，其后紧跟的最后一个象形文字便是署名 Sak Tahn Waax，代表该学者是这套运算公式的创作者。从铭文缺失女性专属前缀可判定，这是一位男性学者。

Какой приговор ждёт в суде нашего соотечественника?

天文学家直接探测到系外行星 LHS 1140 b 大气层中的氦气。LHS 1140 b 是一颗岩石行星，距离地球 48 光年，位于其母星的宜居带。这是首次在宜居带内的类地球岩石行星确认探测到大气层。LHS 1140 b 围绕着一颗比太阳更小更冷的红矮星运行，其轨道比日地距离更近，温度适宜，其表面可能存在液体水，可能有铁质内核。就对地球的生命研究而言，液态水是生命存在的必要条件。论文第一作者 Collin Cherubim 表示需要进一步研究去确认行星是否存在水。

A vulnerability was found in Proxmox Virtual Environment and classified as problematic. Impacted is an unknown function. The manipulation results in cross site scripting. This vulnerability is cataloged as CVE-2026-51081. The attack may be launched remotely. There is no exploit available.

A vulnerability has been found in Proxmox Virtual Environment up to 9.1.8 and classified as problematic. This issue affects some unknown processing of the component VNC Proxy/VNC Websocket API. The manipulation leads to race condition. This vulnerability is listed as CVE-2026-51082. The attack may be initiated remotely. There is no available exploit.

A vulnerability, which was classified as critical, was found in ABB KNX Update Tool up to 2.0.175. This vulnerability affects unknown code of the component Integrity Check. Executing a manipulation can lead to improper validation of integrity check value. This vulnerability is tracked as CVE-2026-12705. The attack is only possible within the local network. No exploit exists.

A vulnerability, which was classified as problematic, has been found in Proxmox Virtual Environment up to 8.4.7/9.1.7. This affects an unknown part of the component qemu-server. Performing a manipulation results in improper access controls. This vulnerability is identified as CVE-2026-51083. The attack can be initiated remotely. There is not any exploit available.

A vulnerability classified as problematic was found in SigNoz up to 0.133.0. Affected by this issue is some unknown functionality of the component SSO Authentication Flow. Such manipulation of the argument ref leads to open redirect. This vulnerability is referenced as CVE-2026-63094. It is possible to launch the attack remotely. No exploit is available.