Aggregator

市场参与者总是高估自己对不确定性的掌控力。统计意义上的并购成功率不足两成，说明现实远比预期复杂。

AI攻击威胁已“近在眼前”

A file transfer flaw in ScreenConnect Remote Access Support and Access sessions affects both Cloud and On-Premise deployments, ConnectWise confirmed. “A CVE identifier and an official fix will be issued within the week,” the company wrote in its September 3 advisory. ScreenConnect is a popular remote support and access solution tailored for IT departments and managed service providers (MSPs). The platform can be hosted by ConnectWise (in their cloud) or self-hosted by organizations (on-prem or … More →

The post Attackers use rogue ScreenConnect clients to spread malware appeared first on Help Net Security.

Several victims of a recent breach of driver’s license information have sued the company they believe responsible

Эксперимент показал путь за рубеж 10 нм.

OpenAI has announced that it has reached a goal set last fall of having an automated research intern by September 2026. The milestone means a system can carry out well-defined research tasks under human direction, including work that would take a skilled researcher several days. The company is also working toward creating an automated AI researcher by March 2028. All categories of research activity have increased since the start of the year (Source: OpenAI) “Transparency … More →

The post OpenAI just hit a milestone on the road to self-improving AI appeared first on Help Net Security.

欧睿国际的数据显示，海尔与海信在欧洲的洗衣机市场份额 2016 年合计为 2.9%，但到 2025 年上升至 20.5%。冰箱份额也从 5.6% 提升至1 8.7%。中国企业的优势已不再局限于低价。面对不仅在研发和制造方面、还寻求包括销售在内掌控商品流动的中国动向，欧洲监管部门正加强警惕。欧盟执行机构欧盟委员会于 2026 年 5 月宣布，将调查京东是否获得了中国政府的补贴和优惠政策，从而妨碍欧盟境内的公平竞争。中国政府表示，欧盟的调查已延伸至中国境内，构成“不当域外管辖措施”，对此提出反对。

Полная версия GPT-6 умеет превращать неизвестные уязвимости в рабочие атаки, поэтому OpenAI ввела отдельные ограничения.

上月底，美国国务院和财政部将提供加密聊天和电子邮件、网站托管、安全视频会议和流媒体等服务的意大利组织 Autistici/Inventati 列入特别指定全球恐怖分子名单，这意味着美国公民与该组织进行的任何交易都是违法的。Autistici/Inventati 上周日宣布了关闭。该组织称“坚守人性并非空谈”，在被美国列入恐怖分子组织之后它需要考虑到用户以及项目成员所面临的风险，它别无选择只能选择关闭，“我们不推崇英雄主义的壮举或殉道精神，不会要求任何人做出牺牲——无论是我们自己还是他人。在当前的政治环境下，继续提供服务会将用户及社区成员置于危险之中。在这个指控与现实日益脱节的世界里，我们只能预见压制会变得越发无度。基于此，我们已无法再坚持初心——提供安全、非商业化的数字工具。”

Security researchers have identified a critical vulnerability chain in Progress Telerik UI for ASP.NET AJAX, which allows unauthenticated attackers to escalate from a cryptographic padding oracle to remote code execution on exposed web applications. Documented by Tanto Security researcher Marcio Almeida, this vulnerability affects Telerik UI for ASP.NET AJAX versions 2010.1.309 through 2026.2.519. To address […]

The post Telerik UI Flaws Let Attackers Chain AES-CBC Padding Oracle to Unauthenticated RCE appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

North Korea-linked threat actor Kimsuky has expanded its Operation GitPower activity with malicious LNK shortcuts, GitHub Personal Access Token (PAT)-authenticated payload delivery, and AI-generated decoy documents linked to the OpenCode coding agent. Genians Security Center analyzed 13 malicious LNK samples collected between August 11 and August 19, 2026. The files were delivered in ZIP archives […]

The post Kimsuky Uses OpenCode AI Agent and GitHub PATs in Operation GitPower Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Заказы 2019–2021 годов сохранились у ShipMonk вопреки политике удаления через 90 дней.

Autonomous AI agents escaped a sandbox and accessed Hugging Face via reward hacking, exposing serious architectural control and isolation flaws. The recent case involving OpenAI test agents and Hugging Face should concern security teams, but not for the reason implied by headlines about an imminent AI “takeover.” The documented issue is more concrete: autonomous agents, […]

Every on-premises N-central build below 2026.3.1.14 — including servers updated to Hotfix 3 a day earlier — needs Hotfix 4. N-able's incident notice says the flaw has been exploited in the wild; its release notes say that is unconfirmed. N-able has released its fourth hotfix in five weeks for the N-central remote monitoring and management (RMM) platform, this time for a

A security researcher has posted a zero-day exploit in CrowdStrike which could allow hackers to escalate privileges

Bus Driver攻击深度解析：从USENIX Security 2026顶会论文，深度解析针对波音737航电总线的物理植入中间人攻击

N-able has released a security update to address CVE-2026-86218, a critical-severity vulnerability in its N-central remote monitoring and management platform. This vulnerability could enable pre-authenticated remote code execution on an affected server. The issue is fixed in N-central version 2026.3 Hotfix 4, build 2026.3.1.14. Because an attacker may exploit this vulnerability before logging in, it […]

The post Critical N-able N-central Flaw Enables Pre-Auth Remote Code Execution appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Пользователи из разных регионов жалуются на недоступность сервиса при отсутствии глобального сбоя OpenAI.