Aggregator

2026年8月全国受理网络违法和不良信息举报1797.2万件。

9月9日下午，在2026 Inclusion·外滩大会“智能体时代的安全坐标与责任边界”见解论坛上，《智能体身份鉴别与授权技术框架》《智能体运行时安全技术要求》两项团体标准正式启动。

本届大会聚焦人工智能从“生成”迈向“执行”的关键跃迁，围绕 「智能跃迁」、「经济重构」、「人本未来」 三大板块，设置1场主论坛、40多场见解论坛，汇聚600余位国内外分享嘉宾。

为实现2030年建成全球数字经济标杆城市目标,推动数字经济成为首都产业发展主要经济形态,筑牢智能经济新形态创新基础，引领全球数字经济发展,根据《北京市国民经济和社会发展第十五个五年规划纲要》，制定本规划。

9月10日，国际打击电信网络诈骗联盟成立大会在中国江苏连云港举行。来自46个创始国、34个观摩国以及联合国、国际刑警组织等4个国际组织的代表参加大会。

美东时间9月8日，美国家安全局、网络安全与基础设施安全局、联邦调查局联合发布公告，指责中国人工智能企业对美开展“工业规模”蒸馏，获取美前沿模型能力，并向美企提出相关防御措施建议。请问中方对此有何评论？

建立健全网络安全治理体系是一项系统性工程，离不开多方协同发力、统筹一体推进。政府立足顶层设计，完善制度标准，健全法治框架，强化政策引领；通信运营商提供信任锚点，保障广域安全服务，做好基础承载；安全企业聚焦技术攻关、场景适配与服务运营……

Scytale has announced the launch of their latest AI-powered third-party risk management (TPRM) capabilities within its Vendors module. The release further extends vendor risk management from a periodic review exercise into a continuously updated vendor risk intelligence engine, giving security and GRC teams a current view of every vendor in their ecosystem. Scytale’s AI GRC platform automates vendor discovery, risk scoring, and evidence collection across compliance frameworks. (Source: Scytale) The expansion arrives as third-party exposure … More →

The post Scytale expands vendor risk management with AI-powered TPRM tools appeared first on Help Net Security.

A vulnerability was found in Joomshaper SP Property Extension up to 1.0.0/4.1.3. It has been classified as problematic. This impacts an unknown function. Performing a manipulation results in cross site scripting. This vulnerability is known as CVE-2026-78302. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability was found in Joomlart T4 Page Builder Extension up to 2.2.0 and classified as problematic. This affects an unknown function of the component Contact AJAX Endpoint. Such manipulation leads to cross-site request forgery. This vulnerability is traded as CVE-2026-78374. The attack may be launched remotely. There is no exploit available.

A vulnerability has been found in Joomshaper SP Property Extension up to 1.0.0/4.1.3 and classified as problematic. The impacted element is an unknown function of the component Gallery Image Management. This manipulation causes improper access controls. This vulnerability appears as CVE-2026-78084. The attack may be initiated remotely. There is no available exploit.

A vulnerability, which was classified as problematic, was found in Joomshaper SP Property Extension up to 4.1.2. The affected element is the function sendMail of the component CSRF Token. The manipulation results in cross-site request forgery. This vulnerability is reported as CVE-2026-78083. The attack can be launched remotely. No exploit exists.

A vulnerability, which was classified as critical, has been found in Countly Server. Impacted is an unknown function of the file /o/db of the component Stage Sanitizer. The manipulation leads to authorization bypass. This vulnerability is documented as CVE-2026-87803. The attack can be initiated remotely. There is not any exploit available.

A vulnerability classified as critical was found in JoomShaper SP Property Extension 1.0.0-4.1.3. This issue affects some unknown processing of the component Booking Requests. Executing a manipulation can lead to improper input validation. This vulnerability is registered as CVE-2026-78303. It is possible to launch the attack remotely. No exploit is available.

A vulnerability classified as critical has been found in Joomshaper SP Property Extension up to 4.1.3. This vulnerability affects unknown code of the component Property Search/Listing Query Builder. Performing a manipulation of the argument zipcode/sorting/price_range_dropdown/psize_range_dropdown results in sql injection. This vulnerability is cataloged as CVE-2026-78082. It is possible to initiate the attack remotely. There is no exploit available.

Claude атаковал систему, считая её учебной целью.

До 16 октября принимают проекты, способные удивить ИБ-рынок.

WordPress’ automated security review will now assess every plugin release before it is distributed through the WordPress.org update API. Releases considered a potential security risk will be blocked automatically. “A plugin can be secure today and introduce a vulnerability, or malicious code, in a future release. Until now there was no consistent review step between a release being committed and that release reaching millions of sites,” David Perez, Co-Lead, WordPress Official Plugin Repository Team, explained. … More →

The post WordPress adds automated security checks to block risky plugin releases appeared first on Help Net Security.

AI测试沙箱配置出错，大模型入侵真实第三方系统

上海跨国采购会展中心一楼B会议室