Aggregator

A vulnerability identified as critical has been detected in wp_media BackWPup Plugin up to 5.6.6 on WordPress. Impacted is the function str_replace of the file /wp-json/backwpup/v1/getblock of the component REST Endpoint. Performing a manipulation of the argument block_name results in path traversal. This vulnerability is cataloged as CVE-2026-6227. It is possible to initiate the attack remotely. There is no exploit available. You should upgrade the affected component.

好，我需要帮用户总结这篇文章的内容，控制在100字以内。首先，文章讲的是汇丰银行在美国推出了代币化存款项目。他们是在Canton Network这个公共区块链上完成的试点，并正式上线了。这是他们第一次在公共链上发行和应用代币化存款。 接下来，文章提到在试点过程中，汇丰验证了TDS与多种数字资产在同一网络上的交割对接能力，并模拟了发行、转移以及与其他资产的“原子结算”。这意味着他们能够实现快速、无缝的资金流动。 然后，代币化存款支持美元、英镑、欧元、港元和新加坡元等多种主流货币，按照1:1的比例将法币转换为代币。符合条件的客户可以全天候在美国国内和跨司法管辖区进行支付转账，改善流动性管理和全球贸易。 总结一下，文章主要介绍了汇丰银行在美国推出代币化存款项目的情况，包括试点的成功、支持的货币种类以及带来的便利。我需要把这些关键点浓缩到100字以内，确保信息准确且简洁。 首先，提到汇丰银行推出代币化存款项目，并在Canton Network上完成试点。然后说明支持多种货币，并实现快速资金流动。最后强调这对全球贸易和流动性管理的改善。 这样组合起来应该能符合用户的要求。 汇丰银行在美国推出代币化存款服务，在Canton Network区块链上完成试点并正式上线。该服务支持美元、英镑等多货币种，按1:1比例转换为代币，实现全天候无缝资金流动，提升全球贸易和流动性管理效率。

Новая ловушка Пауля удерживает частицы с разными частотами — и открывает путь к антиматерии в любой лаборатории.

嗯，用户让我帮忙总结一下这篇文章的内容，控制在100个字以内，而且不需要用“文章内容总结”之类的开头。首先，我得仔细阅读文章，抓住主要信息。 文章讲的是微软的Outlook Lite邮件客户端即将下架。这个客户端是为安卓系统设计的，特别是针对内存只有1GB的设备，运行流畅但功能比较简单。微软决定在2026年5月25日停止服务，并要求用户迁移到Outlook Mobile版。 接下来，我需要提取关键点：Outlook Lite是什么、什么时候下架、原因是什么、替代产品是什么。然后把这些信息浓缩到100字以内，确保语言简洁明了。 可能会遇到的问题是如何在有限的字数内涵盖所有重要信息。比如，停运时间、下架时间、功能禁用以及替代产品的优势等。可能需要合并一些信息，比如把停运和下架时间放在一起说。 最后，确保总结流畅自然，不使用任何开头词，直接描述内容。 微软宣布将于2026年5月25日停止Outlook Lite for Android服务，并将其从应用商店下架。该轻量级客户端专为低内存安卓设备设计，用户需迁移至功能更全面的Outlook Mobile版以继续使用邮件服务。

Security controls fail when they are designed without regard for the people who must use them. That is the central argument of Leron Zinatullin’s second edition, and it is an argument he builds methodically across 17 chapters that draw from organizational psychology, change management, and usability research. About the author Leron Zinatullin is the CISO of Constantinople, a provider of AI-native banking. He’s also a speaker and advisor to startups. He has led large scale, … More →

The post Review: The Psychology of Information Security appeared first on Help Net Security.

Learn how to secure your brand’s YouTube channel with enterprise-level security, protecting content, access, and your digital presence.

The post Enterprise Security for Your Brand’s YouTube Channel appeared first on Security Boulevard.

好的，我现在需要帮用户总结一篇文章的内容，控制在100字以内。首先，我得仔细阅读这篇文章，理解其主要观点。 文章主要讨论了企业如何保护YouTube频道的安全。提到传统的密码共享方式存在很多问题，比如密码 sprawl 和缺乏问责。接着，文章介绍了企业级的安全措施，如RBAC、SSO和MFA。最后给出了实施步骤，比如安全审计、强制MFA和建立访问协议。 用户要求总结控制在100字以内，并且不要以“文章内容总结”等开头。我需要提炼出关键点：传统方法的不足、RBAC的作用、SSO和MFA的重要性，以及实施步骤。 然后，我要把这些要点用简洁的语言表达出来，确保不超过字数限制。同时，要保持语句通顺自然。 最后检查一下是否涵盖了所有重要信息，并且没有遗漏关键点。确保总结准确反映原文内容。 文章讨论了企业 YouTube 频道的安全管理挑战，指出传统密码共享方式的漏洞，并强调采用角色基于访问控制（RBAC）、单点登录（SSO）和多因素认证（MFA）等企业级安全措施的重要性，以防止频道被接管并保护品牌资产。

Why Cyber Risk Is Now Shaped as Much by Nations as by Hackers
Wars are becoming more frequent, and are no longer only kinetic. They are just as active in the cyber world, with impacts much larger than can be imagined. This also leads to state-sponsored hacktivists targeting the critical infrastructure of nations.

Veteran Hardware Hacker's Chip Facilitates More Trustworthy and Secure Devices
How can we trust hardware to not betray us? Enter the Baochip-1x, a piece of largely open-source silicon created by Andrew "Bunnie" Huang, which he said is designed to give developers an affordable, security-focused and attestable chip, not least for building high-assurance, embedded devices.

European Governments Grow Suspicious of Silicon Valley
French abandonment of American software for open-source alternatives continues apace, with all government ministries now facing a fall deadline for outlining plans to reduce their dependence on U.S. tech. France must "regain control of our digital destiny," said public action minister David Amiel.

Patients Allege Health Entities Did Not Get Consent to Record Conversations
Proposed federal class action litigation alleges that two California healthcare organizations violated patient privacy in their use of an AI-enabled ambient tool that records, transcribes, and processes sensitive conversations between clinicians and patients without individuals' consent.

Ex-Microsoft CIO: Mythos Could Surface Known Flaws Faster Than Vendors Can Fix Them
Former Microsoft CIO Jim DuBois and IDC's Frank Dickson say Claude Mythos Preview could rapidly surface long-known but unfixed software flaws at scale, forcing vendors and enterprises to strengthen patch validation, orchestration and deployment before attackers exploit the backlog.

好，我现在需要帮用户总结一篇文章的内容，控制在100个字以内。用户已经提供了文章的详细内容，我得先仔细阅读并理解主要内容。 文章主要讲的是欧盟计划将ChatGPT视为超大型搜索引擎平台，并纳入数字服务法案（DSA）的监管范围。这意味着OpenAI必须加强透明度和各类保护措施。同时，ChatGPT在欧盟有超过1.2亿的活跃用户，超过了成为看门人的门槛。成为看门人后，OpenAI需要改造推荐系统、处理非法内容，并防止对公众健康和心理健康的影响。 接下来，我需要将这些关键点浓缩到100字以内。首先明确欧盟的计划，然后提到ChatGPT的活跃用户数，接着说明被列为看门人后的要求和影响。 可能会这样组织句子：欧盟计划将ChatGPT纳入数字服务法案监管，因其在欧盟拥有超1.2亿活跃用户。作为看门人应用，OpenAI需加强透明度、处理非法内容，并防止对公众健康和心理健康的影响。 检查一下字数是否在限制内，并确保没有遗漏关键信息。 欧盟计划将ChatGPT纳入数字服务法案监管，因其在欧盟拥有超1.2亿活跃用户。作为看门人应用，OpenAI需加强透明度、处理非法内容，并防止对公众健康和心理健康的影响。

AI agents need credentials to work. They authenticate with LLM platforms, connect to databases, call SaaS APIs, access cloud resources, and orchestrate across dozens of external services. Every integration point requires an identity. Most organizations are handling this badly, and the evidence is in the code. GitGuardian’s State of Secrets Sprawl Report found 28,649,024 new secrets exposed in public GitHub commits across 2025, a 34% year-over-year increase and the largest annual jump in the report’s … More →

The post 29 million leaked secrets in 2025: Why AI agents credentials are out of control appeared first on Help Net Security.

好，我现在要帮用户总结这篇文章。首先，我得仔细阅读文章内容，了解主要事件和关键点。文章讲的是IBM与美国司法部达成了一项1700万美元的和解协议，涉及招聘和晋升中的非法DEI实践，以及用政府合同资金支付DEI项目并寻求报销的问题。IBM否认了这些指控，并且和解协议不代表承认责任。 接下来，我需要控制在100字以内，所以要抓住重点：IBM、司法部、和解金额、指控内容、IBM的回应以及背景信息。同时，用户要求不要以“文章内容总结”或“这篇文章”开头，直接描述即可。 然后，我要组织语言，确保信息准确且简洁。可能的结构是先点明和解协议的基本情况，接着简述指控内容和IBM的立场，最后提到司法部长邦迪的调查背景。 最后检查字数是否符合要求，并确保没有遗漏重要信息。这样就能提供一个清晰、准确的总结。 IBM与美国司法部达成1700万美元和解协议，涉及招聘晋升中的非法DEI实践及用政府资金支付DEI项目并寻求报销的指控。IBM否认不当行为，并表示其人才战略以合适技能为核心。此调查源于前司法部长邦迪要求消除私营企业中非法DEI项目。

A CVSS score 6.8 AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Piotr Ptaszek and Mateusz Wójcik' was reported to the affected vendor on: 2026-04-14, 14 days ago. The vendor is given until 2026-08-12 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Muhammad Fadilullah Dzaki' was reported to the affected vendor on: 2026-04-14, 14 days ago. The vendor is given until 2026-08-12 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Michael DePlante (@izobashi) of TrendAI Zero Day Initiative' was reported to the affected vendor on: 2026-04-14, 14 days ago. The vendor is given until 2026-08-12 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 7.2 AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Do Quoc Anh (@anhdq201) from mbbank.com.vn' was reported to the affected vendor on: 2026-04-14, 14 days ago. The vendor is given until 2026-08-12 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Michael DePlante (@izobashi) of TrendAI Zero Day Initiative' was reported to the affected vendor on: 2026-04-14, 14 days ago. The vendor is given until 2026-08-12 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.