Aggregator
Mirax Android RAT Turns Devices into SOCKS5 Proxies, Reaching 220,000 via Meta Ads
加权费马点挑战题
Axios 严重漏洞可导致 RCE
Apache Tomcat 紧急修复多个漏洞
美英报告称Mythos模型无限压缩漏洞披露到武器化时间窗口
关基部门预算暴涨!美国联邦政府2027财年网络安全拟投入超830亿元
Google to penalize sites that hijack the back button
Google is broadening its spam policies to crack down on “back button hijacking,” a deceptive practice where websites interfere with browser navigation, blocking users from returning to the page they came from. Instead, users are usually redirected to pages they have not visited or are shown unsolicited recommendations or ads. “Back button hijacking interferes with the browser’s functionality, breaks the expected user journey, and results in user frustration. People report feeling manipulated and less willing … More →
The post Google to penalize sites that hijack the back button appeared first on Help Net Security.
Цифровые двойники мозга оказались бесполезны. Никто не учёл, что его части постоянно борются друг с другом
Ransomware-Linked ViperTunnel Malware Hits UK and US Businesses
Cybersecurity in an Age of Geopolitical Fracture
Wars are becoming more frequent, and are no longer only kinetic. They are just as active in the cyber world, with impacts much larger than can be imagined. This also leads to state-sponsored hacktivists targeting the critical infrastructure of nations.
In Open-Source Silicon We Trust: 'Bunnie' Huang's Baochip
How can we trust hardware to not betray us? Enter the Baochip-1x, a piece of largely open-source silicon created by Andrew "Bunnie" Huang, which he said is designed to give developers an affordable, security-focused and attestable chip, not least for building high-assurance, embedded devices.
France Tees Up Big Public Sector Move Away From US Tech
French abandonment of American software for open-source alternatives continues apace, with all government ministries now facing a fall deadline for outlining plans to reduce their dependence on U.S. tech. France must "regain control of our digital destiny," said public action minister David Amiel.
Lawsuit: AI Illegally Recorded Doctor-Patient Encounters
Proposed federal class action litigation alleges that two California healthcare organizations violated patient privacy in their use of an AI-enabled ambient tool that records, transcribes, and processes sensitive conversations between clinicians and patients without individuals' consent.
Claude Mythos Could Flood Vendors With Fixes They Deferred
Former Microsoft CIO Jim DuBois and IDC's Frank Dickson say Claude Mythos Preview could rapidly surface long-known but unfixed software flaws at scale, forcing vendors and enterprises to strengthen patch validation, orchestration and deployment before attackers exploit the backlog.
天才程序员上线:AI 逆向与安全开发全栈实战
Rockstar Games确认遭供应链攻击,第三方SaaS成数据泄漏跳板
ivanti CVE-2025-0282 漏洞复现
Analysis of 216M Security Findings Shows a 4x Increase In Critical Risk (2026 Report)
Secretary Mullin must help finish the job: Urge the Senate to confirm Plankey
With global cyber threats escalating and budget cuts looming, CISA needs a Senate-confirmed director. It’s time to confirm Sean Plankey.
The post Secretary Mullin must help finish the job: Urge the Senate to confirm Plankey appeared first on CyberScoop.