Aggregator

微软承诺大幅改进 Windows 11 的搜索功能

Solidot
1 week 3 days ago
Windows 11 的搜索功能集成了 Web 搜索（Bing）和本地搜索，经常在用户想要搜索本地文件时显示 Web 搜索结果。对于用户的抱怨，微软现在终于表示它听到了，官方博客承诺全面改进搜索功能，优先显示本地应用、文件和设置的结果，同时移除广告、推广、MSN/Bing 等干扰内容，致力于“提升搜索结果的可靠性、易用性和清晰度”。搜索功​​能也提升了拼写错误处理，即使用户拼错了应用或文件名，也能找到正确的结果。这些功能改进已经包含在预览版中，预计将于今年晚些时候推送给所有 Windows 11 用户。

Miasma Turns Trusted npm Packages Into Persistent Backdoors for Developer Machines

Cyber Security News
1 week 3 days ago

Miasma has returned through software packages that many developers would normally trust. Four AsyncAPI packages on npm were altered to deliver a Miasma v3 payload, creating a route for long-term remote access. The campaign does not depend on malware running when a package is installed. Instead, hidden code activates when an application, generator, or build […]

The post Miasma Turns Trusted npm Packages Into Persistent Backdoors for Developer Machines appeared first on Cyber Security News.

Tushar Subhra Dutta

Maximizing SOC Efficiency: How to Eliminate Alert Overload and Cut MTTR by 21 Minutes Per Case

Cyber Security News
1 week 3 days ago

Security Operations Centers (SOCs) face overwhelming challenges not due to a lack of alerts but because each alert requires a new investigation. Analysts must validate indicators, identify malicious behavior, assess the scope of threats, and determine whether to contain or escalate cases, all while navigating disconnected tools. This fragmented approach wastes time, contributes to alert […]

The post Maximizing SOC Efficiency: How to Eliminate Alert Overload and Cut MTTR by 21 Minutes Per Case appeared first on Cyber Security News.

Abinaya

Turkish Banks Targeted by 8,400 Phishing Domains and 6,600 Social Media Scam Ads

Cyber Security News
1 week 3 days ago

Turkey’s banking customers are facing a large fraud campaign built around fake websites and social media advertisements. Criminals are abusing trusted financial brands to draw people into credential theft, fake loan offers, and other scams designed to steal money quickly. The operation is notable for its scale and speed, as more than 8,400 phishing domains […]

The post Turkish Banks Targeted by 8,400 Phishing Domains and 6,600 Social Media Scam Ads appeared first on Cyber Security News.

Tushar Subhra Dutta

加州新提案将禁止无限滚动

Solidot
1 week 3 days ago
加州民主党议员 Josh Lowenthal 今年初提出了法案 Assembly Bill 1709，禁止 16 岁以下儿童使用具有成瘾设计的社媒平台。在听取反馈之后，Lowenthal 修改了其提案，改为禁止社媒平台使用具有成瘾性质的设计，而所谓成瘾设计包括了无限滚动的信息流、自动播放、推荐算法和推送通知等常见的社媒功能。Lowenthal 表示其提案的初衷不是阻止访问，而是阻止掠夺性行为。提案要求社媒公司在 2028 年前调整其平台。Lowenthal 在听证会上表示无限滚动等是产品功能而不是言论。

You Don't Have to Run an Exploit to Know If You're Vulnerable

Bleeping Computer.
1 week 3 days ago
Many vulnerabilities cannot be safely validated with live exploits, either because no exploit exists or the affected systems are too critical to test. Picus explains how TTP chaining helps organizations determine exploitability by validating the attack techniques an exploit depends on, without launching the exploit itself. [...]
Sponsored by Picus Software

RabbitMQ Flaws Could Leak OAuth Secrets and Expose Cross-Tenant Queue Metadata

The Hackers News
1 week 3 days ago
Cybersecurity researchers have disclosed details of two access control-related flaws impacting the RabbitMQ message broker service that could allow attackers to leak OAuth client secrets, expose enterprise messaging infrastructure to takeover risks, and bypass tenant boundaries. Miggo's security team, which discovered and reported the flaws, said one "leaks the broker's confidential OAuth
The Hacker News

Managed ad