Aggregator

A vulnerability classified as critical has been found in LibreNMS up to 26.2.x. Affected is an unknown function of the component Netcommand Feature. The manipulation leads to os command injection. This vulnerability is referenced as CVE-2026-6204. Remote exploitation of the attack is possible. No exploit is available. It is recommended to upgrade the affected component.

Версия 7.0 укрепляет безопасность, файловые системы и признает новую роль Rust и генеративных помощников.

Ghost APIs are deprecated endpoints left active, exposing systems to attack. Learn how they differ from shadow APIs and why they create hidden security risks

Google is working to improve the security of Pixel phones by focusing on the cellular baseband modem, a part of the device that handles communication with mobile networks and processes external data. In the Pixel 9, the company introduced measures to reduce memory-related vulnerabilities. With the Pixel 10, the approach goes further by integrating a DNS parser written in the Rust programming language into the modem firmware. The DNS protocol is known for helping browsers … More →

The post Google makes it harder to exploit Pixel 10 modem firmware appeared first on Help Net Security.

关键词漏洞漏洞利用时间现已降至负七天，自主AI代理加速威胁，数据不再支持渐进式改进。防御架构必须改变。

关键词加密货币英国国家犯罪局（NCA）主导的国际执法行动已识别加拿大、英国和美国超过2万名加密货币诈骗受害者。

关键词黑客一名威胁行为体在高度复杂的网络攻击中入侵九家墨西哥政府机构，窃取数亿公民记录。

随着游戏日益图像密集，显存占用愈来愈成为一大问题。提升视觉保真度需要将越来越多的游戏素材储存在显卡的显存内。但显存的容量有限，不是人人桌面上都有 128 GB 大显存的数据中心级 GPU。Valve 工程师 Natalie Vock 开发了新的内核补丁和两个专门的工具去解决容量在 8GB 以内的显卡显存占用问题。她的补丁主要针对 AMD GPU，英特尔的 Xe 显卡也支持，但使用私有驱动的英伟达显卡不支持——原因是英伟达私有内核模块不支持 dmem cgroups。她的方法主要是确保前台运行的游戏对显存有优先使用权，如果显存开始占满，后台任务占用的显存将优先转移到系统内存。在有 8GB 显存的显卡上运行《赛博朋克 2077》，有 1.37GB 的显存溢出到 GTT（Graphics Translation Table），游戏实际上只用了 6GB 显存，应用补丁之后游戏占用的显存提高到 7.4GB，GTT 减少到 650MB。

Citizen Lab reported that law enforcement used the surveillance tool Webloc to track up to 500M devices via ad data globally. A report by Citizen Lab revealed that law enforcement agencies in the U.S., Hungary, and El Salvador used a surveillance tool called Webloc to track devices via advertising data, potentially affecting up to 500 […]

Спецслужбы США обвинили Иран в массовых атаках на американские системы водоснабжения.

速修复

速修复

The W3LL phishing kit has been associated with fraud attempts totaling $20m

A vulnerability described as critical has been identified in Google Agent Development Kit up to 1.28.0/2.0.0a1. This impacts an unknown function. Executing a manipulation can lead to missing authentication. The identification of this vulnerability is CVE-2026-4810. The attack may be launched remotely. There is no exploit available. This product is a managed service. It is not possible for users to maintain vulnerability countermeasures themselves. Upgrading the affected component is recommended.

Alleged German cybercrime figure behind Fluxstress and Neldowner arrested in Thailand after years running global DDoS-for-hire services across countries.

以AI提效漏洞研究，360荣膺开源鸿蒙社区两大奖项

Siemens will present the next generation of its Industrial Automation DataCenter, a custom-configured data center for IT needs in production, expanding its turnkey solution into an AI-ready platform. Structure of the Siemens Industrial Automation DataCenter and its Remote Industrial Operations Services (Source: Siemens AG) In partnership with NVIDIA and in collaboration with Palo Alto Networks, Siemens delivers secure NVIDIA computing infrastructure at the edge for powerful AI acceleration, alongside NVIDIA BlueField data processing units (DPUs) … More →

The post Siemens expands Industrial Automation DataCenter with edge AI and cybersecurity appeared first on Help Net Security.

智能经济新业态正加速发展，词元（Token）已成为最基础且普遍的需求。数据显示，今年3月，我国日均词元（Token）调用量已经超过140万亿，两年间增幅超过1400倍。这一爆发式增长表明，词元正从技术概念走向商业现实，成为智能时代的重要基础资源。

4月13日，在第11个全民国家安全教育日来临之际，“统筹发展和安全 护航‘十五五’新征程——第三届北京市总体国家安全观理论研讨会”在首都师范大学举行。