Aggregator

A new ransomware actor called Spirals completed a corporate intrusion, from initial access to data theft and encryption, in less than 24 hours. [...]

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

一考双证，工信部+360官方认定

Windows 全新本地提权零日漏洞公开 PoC

看雪论坛作者ID：KsaNL

讲师阵容夯爆了！报名从速！！

阅读： 10■ 通告编号NS-2026–0017■ 发布日期 2026–07-15■ 漏洞危害攻击者利用本次安全更新中的漏洞，可造成权限提升、远

编注：很多读者都会好奇少数派的编辑们到底平时都「买了啥」。我们希望通过「编辑部的新玩意」介绍编辑部成员们最近在用的新奇产品，让他们自己来谈谈这些新玩意的使用体验究竟如何。内容声明：《新玩意》栏目如含有

Новая система США определит приоритетные угрозы для финансовой и государственной инфраструктуры.

If you pay for something, you expect it to work as intended. The vendor shouldn’t start turni

SANS Institute says governance programs are still nascent even as AI failures and threats grow

Tenable has announced the expansion of the Tenable One Exposure Management Platform, unifying application security risks with all other exposure data. By integrating static code vulnerability data, Tenable One delivers complete, code-to-runtime visibility across the entire attack surface. Security teams have long struggled with a code security problem where vulnerable code reaches production faster than it can be reviewed. This problem is exacerbated by the use of generative AI, which empowers developers to ship code … More →

The post Tenable One unifies code risks with enterprise exposure data appeared first on Help Net Security.

发表在 PLOS One 上的一项新研究发现，马不依赖声音、气味或过往经验就能识别屏幕上的捕食者。传感器显示，马看到屏幕上的狼后心跳会加速，但面无表情十分镇定。研究显示，马没有摇头，没有摇尾巴，其目光也没有锁定屏幕以表明大脑在处理威胁信息。论文第一作者 Zeynep Benderlioglu 称，马在评估潜在威胁时展现出惊人的认知克制而不是惊吓。在实验中，马看到屏幕上的袋熊时心率平稳，但看到屏幕上的狼——无论狼是在攻击还是梳理——时其心率会显著加快，其中雄性马的反应更强烈。Benderlioglu 说，马的认知处理能力出乎意料的高。它们高度警惕，但威胁并没有出现，所以它们没有表现出任何异常行为，它们正在进行认知评估。”

发表在 PLOS One 上的一项新研究发现，马不依赖声音、气味或过往经验就能识别屏幕上的捕食者。传感器显示，马看到屏幕上的狼后心跳会加速，但面无表情十分镇定。研究显示，马没有摇头，没有摇

Pull the certificate off the flash of a Shark RV2320EDUS robot vacuum, and you can run root commands on other people's Shark vacuums across the same AWS region: watch the camera, drive the robot, read the map of the house, and take the Wi-Fi password in plaintext. A researcher publishing under the handle tokay0 put the method online on Monday, having tested it only against vacuums he

Pull the certificate off the flash of a Shark RV2320EDUS robot vacuum, and you can run root command

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has warned that attackers are actively exploiting CVE-2026-46817, an improper privilege management vulnerability in Oracle E-Business Suite that can lead to a takeover of Oracle Payments. The agency added the issue to its Known Exploited Vulnerabilities Catalog on July 15, 2026, and directed affected federal civilian executive […]

The post CISA Warns of Actively Exploited Oracle E-Business Suite Flaw appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.