Aggregator

贯彻落实党中央、国务院决策部署，为推动我国互联网基础资源高质量发展，塑造互联网发展新动能新优势，工业和信息化部、中央网信办、国家发展改革委、国家数据局等四部门近日联合印发《关于推动互联网基础资源高质量发展的指导意见》。

随着《中华人民共和国网络安全法》《中华人民共和国数据安全法》《中华人民共和国个人信息保护法》等法规的相继出台，对数据实行分类分级保护，已被明确列为我国网络运营者必须履行的安全保护职责之一，数据安全实践迈入有法可依、有章可循的全新阶段。

7月10日，以“智算无界，范式跃迁”为主题的光合组织2026智能计算应用大会在郑州成功举办。作为大会的重要组成部分，“AI赋能政法工作·安全护航数智应用”政法分论坛于同日成功举办。

根据中国科学院应用生态研究所科学家朱教君团队的监测，自 2000 年以来，中国荒漠化土地总体减少了约 10%，重度或极重度荒漠化土地面积减少了 40% 以上。三北防护林项目区森林覆盖率从 1978 年的约 5% 上升到 2022 年的 14%。三北防护林种植的森林累计面积已达 50 万平方公里。项目采用的“稻草棋盘格”技术是一种简单但应用广泛的方法，它能稳定沙丘、抵御风力，并通过灌溉系统供水帮助植物生根发芽。朱教君表示这一进展是前线控沙工作人员努力工作、高层规划和国家大量投资共同作用的结果。近年来部分地区降雨量的增加也使植被恢复变得更加容易。他称，项目的一个关键问题是如何实现可持续的森林保护。

То, что считалось невозможным полвека, удалось благодаря напечатанной на 3D-принтере коробке.

2026年7月11日，密苏里大学堪萨斯城分校ASSET研究组的两位研究人员Sudipta Chattopadhyay和Murali Ediga公开了一种名为Ghostcommit的新型攻击手法，能够将目标的.env文件全部窃取。该攻击的巧妙之处就在于：恶意指令不是文本，而是一张图片。

黑客利用认证账号发布欺诈代币，20分钟内卷走73.7 ETH

看雪论坛作者ID：F0xm1ao

真设备・真项目・真内推

上周关注度较高的产品安全漏洞(20260706-20260712)

国家信息安全漏洞共享平台（以下简称CNVD）本周共收集、整理信息安全漏洞428个，其中高危漏洞237个、中危漏洞145个、低危漏洞46个。

A vulnerability categorized as problematic has been discovered in HAPI FHIR 5.4.0/6.4.0. This impacts the function FHIRPathEngine.matches. Such manipulation leads to inefficient regular expression complexity. This vulnerability is referenced as CVE-2026-55470. It is possible to launch the attack remotely. No exploit is available. It is advisable to upgrade the affected component.

A vulnerability was found in bytecodealliance wasmtime up to 24.0.10/36.0.11/45.0.2/46.0.0. It has been classified as problematic. This affects an unknown function of the component Filesystem Interface. This manipulation causes permission issues. This vulnerability is handled as CVE-2026-58494. The attack can be initiated remotely. There is not any exploit available.

A vulnerability, which was classified as critical, has been found in zopefoundation RestrictedPython up to 8.2. Affected is the function check_function_argument_names of the component Argument Validation. This manipulation of the argument Local causes improper access controls. This vulnerability is registered as CVE-2026-55830. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability, which was classified as very critical, was found in fluent Fluentd up to 1.19.2. Affected by this vulnerability is an unknown functionality of the component out_file. Such manipulation of the argument path leads to path traversal. This vulnerability is documented as CVE-2026-44024. The attack can be executed remotely. There is not any exploit available.

A vulnerability was found in grokability Snipe-IT up to 8.5.0 and classified as problematic. This affects an unknown part of the component API Endpoint. Executing a manipulation can lead to improper authorization. This vulnerability appears as CVE-2026-48492. The attack may be performed from remote. There is no available exploit.

A vulnerability was found in fluent Fluentd up to 1.19.2. It has been classified as critical. This vulnerability affects unknown code of the component in_http/in_forward plugins. The manipulation leads to uncontrolled memory allocation. This vulnerability is traded as CVE-2026-44160. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability was found in fluent Fluentd up to 1.19.2. It has been declared as problematic. This issue affects some unknown processing of the file /api/plugins.json of the component Monitor Agent Plugin. The manipulation results in missing initialization of a variable. This vulnerability is known as CVE-2026-44025. It is possible to launch the attack remotely. No exploit is available.