Aggregator

OpenAI appears to be testing a new "Writing Style" feature for ChatGPT that can learn how you write by looking at examples from your connected apps. [...]

Hackers are exploiting a chain of two recently disclosed vulnerabilities in MikroTik routers to take control of devices with SSH services exposed to the internet. [...]

2026年度陕西省科学技术奖拟提名项目公示（网络空间安全领域）

A newly documented Windows attack pattern, dubbed Bring Your Own Trusted Caller (BYOTC), shows how attackers can bypass driver-level authorization controls without exploiting a traditional memory-corruption flaw. Instead of attacking a privileged kernel driver directly, an adversary compromises or abuses the legitimate user-mode application that the driver already trusts. The technique expands on the well-known […]

The post BYOTC Attack Abuses Trusted Windows Clients to Access Privileged Kernel Driver Operations appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

JSCeal hides crypto-stealing malware in V8 bytecode, but researchers built a tool to decompile it and expose its advanced theft capabilities. JSCeal is a cryptocurrency stealer that Check Point Research has tracked since early 2025. Unlike most malware, it hides its code in a format that makes analysis much harder. Check Point presented its latest […]

Roundcube has released security updates 1.6.19 and 1.7.4, which address 12 vulnerabilities affecting its 1.6 LTS and 1.7 Webmail branches. The flaws include a zero-click stored cross-site scripting (XSS) vulnerability, several bypasses of remote content filtering, email header injection bugs, cross-user contact access issues, and a server-side request forgery (SSRF) bypass. Published on September 6, […]

The post Roundcube Fixes 12 Security Flaws Including Zero-Click XSS and SSRF Bypass appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Физики получили неожиданно прочную структуру.

ConnectWise has shared temporary mitigation measures for a new ScreenConnect Remote Access vulnerability that it plans to patch later this week. [...]

恶意浏览器插件可接管整机执行系统命令

看雪论坛作者ID：mb_dcvvjyqc

10月23日，上海见

2026年8月27日，安全研究机构 Mindgard 公开披露了 Amazon Kiro IDE 的一处提示注入漏洞。

Best value overall: Tailscale. It publishes its pricing, has a genuinely usable free tier for small teams, and its per-service access model is more secure than the network-level access a traditional VPN gives you. Best free option: WireGuard, if you have the engineering capacity to run it yourself. Best enterprise picks: Palo Alto GlobalProtect and […]

The post The Best 12 Business VPN Solutions, Compared and Priced appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

从美国波士顿迁往瑞士苏黎世的 Ig Nobel 奖颁奖典礼宣布了 2026 年的获奖者。明年的颁奖典礼将在德国 Flanders 的 Antwerp 举行，2028 年重返瑞士，以后的偶数年颁奖典礼都在苏黎世举行。获奖名单包括：
生物力学奖授予了对接吻进行精确定义的 Matilda Brindle 等人，研究人员称接吻是“非对抗性的、同种个体间的口口接触行为，伴随嘴唇或口器的轻微运动，但不涉及食物传递”，适用于蚂蚁、鸟类、北极熊和人类。
经济学奖授予了 Paul Piff 等人，他们收集的证据证明，上层阶级人士更可能偷窃儿童的糖果，以及从事其他不道德行为，倾向于将贪婪视为一种积极的品质。
化学奖授予了 Sanchari Banerjee 等人，名为 Diploptera punctata 的蟑螂能通过育卵囊壁内分泌乳汁直接滋养胚胎，这种繁殖方式被称为“胎生（viviparity）”，研究人员分析了其乳汁结晶发现其乳蛋白能量是牛奶蛋白的三倍以上。
医学奖授予了日本已故科学家海野德二，其学生高原干教授代表他领奖，这是日本人连续 20 年获奖。　海野的研究是对擤鼻涕时的空气流动和速度等进行测定。他得出结论认为，若按住一个鼻孔从另一边呼气的话，空气的流速会变快，分别按住一侧鼻孔、用另一侧充分呼气的方式擤鼻子更为有效。

Super Intelligent，Super cool！

已成功落地多个重要行业

Открытые серверы показали, как далеко зашёл эксперимент с цифровыми исполнителями.

市场参与者总是高估自己对不确定性的掌控力。统计意义上的并购成功率不足两成，说明现实远比预期复杂。