Aggregator

一次多搜索引擎黑盒对照与真实 Web 打点实践

Safetensors 的文件头保存张量名、dtype、shape 与 data_offsets。格式说明禁止重复键，并明确提示并非每个解析器都会遵守这一限制。

本文提出一种针对分布式短信轰炸的终端侧检测方案，通过时间衰减计数、发送方香农熵及状态机模型将判定对象从单条短信提升至攻击事件。该方法利用多源合法验证码的联合行为特征识别恶意洪泛，并在 iOS Message Filter 限制下实现了攻击感知与通知收敛。

最近漏洞爆发比较频繁（尤其java漏洞），于是想将之前的代码审计工具结合AI去实现做自动化漏洞挖掘以及gadget链路寻找（进行一次AI代码审计的探索）。

2026 年 8 月16日，笔者在处置一起服务器入侵事件时，发现攻击者通过篡改宝塔面板 nginx 全局配置（16 个 `enable-php-*.conf`）注入 `sub_filter` 恶意指令，对全站实施"仅移动端 + 搜索引擎来源 + 中国时区"的精准流量劫持。沿恶意 JS 的 C2 基础设施逐层追踪，最终挖出一个**集"蜘蛛池软件销售 + 网站流量劫持服务"于一体的黑产 SEO 团伙*

Surfshark disclosed that hackers accessed one of its internal test servers after a configuration error exposed it to the internet. [...]

Microsoft Excel users report that this week's KB5002914 Office security update is breaking copy-and-paste operations and formula dragging, with affected users saying that removing or rolling back the update restores normal functionality. [...]

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Cisco, Google Chromium V8, Fortinet, and Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2026-20079 (CVSS score of 10.0) is an authentication bypass issue. The flaw resides in Cisco Secure […]

A notice dated September 4 but not widely shared shows that IDScan acknowledged a data breach but did not specify how many people were affected.

Ronzelle Green, most recently a senior official at the National Geospatial-Intelligence Agency, will be U.S. Cyber Command's chief AI officer.

A lot of this week’s security news has the same awkward answer to one question: “Why was that allowed to work?” An extension asks for access and takes too much. A trusted service becomes part of a phishing chain. An old bug still gets results. An exposed system stays exposed. A package looks useful right up until it isn’t. Different stories, same basic problem: the path in was often already

Microsoft examines an AI-assisted business email compromise campaign that used executive impersonation and fake invoices to target finance teams with ACH payment fraud.

The post Protecting organizations from AI-assisted executive impersonation and invoice fraud appeared first on Microsoft Security Blog.

A forum actor posting as GoreTerminal has released what they claim is a filtered dataset belonging to FairMoney, a licensed digital bank in Nigeria that provides personal loans and mobile financial services.

本周早期时候，YouTube 主播 Gamers Nexus 与独立安全研究人员合作，发现 LG 的智能电视机即便在离线或待机模式下也会持续记录并上传用户数据。LG 电视还会扫描 Wi-Fi 网络、记录音频日志，采样音视频输入内容以识别用户正在观看的节目。LG 在一则声明中称视频内容不实，“LG 电视仅在用户按住遥控器上的语音按钮，或在激活 Far-Field 功能后识别出‘Hi LG’等唤醒词时，才会处理语音数据。”LG 表示除此之外其智能电视不会收集或记录环境中的对话。如果未识别出唤醒词，电视不会向服务器传输任何语音数据，针对唤醒词的音频处理是在设备本地完成的。LG 声称 Automatic content recognition (ACR)是可选启用的功能，旨在提供个性化的内容推荐、服务及广告。在默认情况下，未经用户同意，ACR 数据不会被用于广告目的。

Melbourne, Florida, September 10th, 2026, CyberNewswire With its Verification Architecture platform now commercially available and continuing to add new capabilities, OpenMatter Network today announced a strategic realignment of its leadership team designed to accelerate subscription growth, expand industry partnerships and position the company for long-term commercial success. Effective September 1, Mike Anderson has been named […]

The post OpenMatter Network Realigns Leadership Team to Accelerate Global Commercial Growth appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Melbourne, Florida, September 10th, 2026, CyberNewswire With its Verification Architecture platform now commercially available and continuing to add new capabilities, OpenMatter Network today announced a strategic realignment of its leadership team designed to accelerate subscription growth, expand industry partnerships and position the company for long-term commercial success. Effective September 1, Mike Anderson has been named […]

The post OpenMatter Network Realigns Leadership Team to Accelerate Global Commercial Growth appeared first on Cyber Security News.

在 Steam 上购买和运行育碧的游戏需要安装其客户端 Ubisoft Connect，启动游戏时需要同时启动育碧和 Steam 两个启动程序，这种做法长期受到 Steam 玩家的诟病。现在育碧宣布将逐步取消这一要求，“从《Prince of Persia: The Lost Crown》起，我们将测试一项名为‘Ubisoft Connect Services’的全新 Steam 工具。该工具能保留跨平台进度、跨平台联机、玩家安全保障、挑战与奖励等育碧游戏功能，而无需安装或启动 Ubisoft Connect PC 客户端。”Ubisoft Connect Services 未来将逐步推广给 Steam 平台上更多的育碧游戏。

Лекарству открыли дорогу, а клеткам перекрыли путь назад.