Aggregator

Хакерам не нужно вас взламывать — им продадут готовый доступ.

腾讯云安全发布最新必修漏洞清单，盘点8大高危漏洞，助力企业精准修复，筑牢安全防线。

速修复

速修复

Пентесты проводились в рамках программы комплексного регулярного анализа защищенности экосистемы продуктов Orion soft.

A suspected China-aligned threat activity cluster has been observed exploiting Roundcube webmail software belonging to physics and engineering departments of U.S. and Canadian universities as part of a new campaign. The activity involves the exploitation of now-patched, critical security flaws in the open-source email solution, such as CVE-2024-42009 (CVSS score: 9.3), to siphon credentials,

在智能手机和社媒时代，人们将越来越多的时间花在屏幕上。调查显示，美国人每天的平均社交时间从 20 年前的 45 分钟减少 10 分钟至 35 分钟。这一趋势在所有年龄段都存在，其中 15-24 岁人群下降幅度最大，每天社交时间从约 1 小时降至 35 分钟。与此同时，青少年平均每天花费 4.8 小时在 TikTok、Instagram 和 Snapchat 等社媒应用上。聚会场所的减少也是造成这一趋势的原因之一。过去十年美国各类休闲场所——从图书馆到咖啡馆到博物馆——都出现了大范围关闭，甚至教堂也存在类似现象。

Proofpoint researchers said attackers targeted physics and engineering departments, and warn that the campaign is likely ongoing.

The post Suspected Chinese espionage group used a Roundcube exploit chain to burrow into universities appeared first on CyberScoop.

目前针对相关数字电表最复杂的技术攻击

CEO Perplexity объяснил, почему ИИ вернёт людям любопытство, которое убили ленты соцсетей.

A new Iranian-linked hacking group has been caught abusing everyday IT tools to slip malware onto Israeli networks. Researchers have named the group Cavern Manticore, and its latest campaign shows how creative attackers have become at hiding in plain sight. Instead of flashy exploits, the group leans on software organizations already trust. At the heart […]

The post Cavern Manticore Abuses SysAid RMM and WinDirStat DLL Sideloading to Deploy C2 Framework appeared first on Cyber Security News.

作者：William Hackett, Peter Garraghan 原文链接：https://arxiv.org/pdf/2607.02121v1 摘要 随着大型语言模型（LLM）和智能体系统融入实际应用，确保其安全性和保障性变得至关重要。用于检测并拦截发送至LLM及从LLM发出的恶意指令的护栏系统，是AI安全的关键组成部分。然而，针对生产级AI系统进行黑盒对抗模拟的研究人员，常常难以判断是护...

Что известно об атаке, которая обвалила курс мем-коина на 7%.

Armored Likho APT uses AI-generated malware, phishing, and BusySnake Stealer to target governments and power grids in Russia, Kazakhstan, and Brazil. Kaspersky’s threat research team has documented a previously unknown APT group they’re calling Armored Likho, also tracked under the name Eagle Werewolf. The group runs two parallel tracks: financially motivated attacks against private individuals […]

Threat actors are exploiting an Adobe ColdFusion vulnerability which has a CVSS score of 10.0

BeyondTrust warned customers to patch two critical security flaws in its Remote Support (RS) and Privileged Remote Access (PRA) software that could allow attackers to bypass authentication. [...]

Апрельские жалобы правообладателей проигнорировали — медиарынок идёт на второй заход.

微软裁员 4800 人，其中游戏业务 Xbox 裁员 1600 人，多个游戏工作室或者出售或者独立。微软执行副总裁兼首席人力资源官 Amy Coleman 强调：被裁掉的职位不会被 AI 取代，但 AI 确实在改变工作的方式。部分日常工作可以自动化了，意味着人人都需要不断学习，不断提升技能，并不断调整自己。Xbox CEO Asha Sharma 称这是 Xbox 历史上最重大的重组。Xbox 将缩小业务范围，放弃回报率低的业务，专注于回报率高的业务如《我的世界》的 Mojang 以及《糖果粉碎传奇》的手游开发商 King。作为重组的一部分，Double Fine 和 Compulsion 两大工作室将独立。Ninja Theory 和 Undead Labs 工作室出售，Arkane 工作室则在评估中可能独立可能出售，Obsidian 工作室裁掉四分之一员工，id Software 也大规模裁员。

A vulnerability has been found in HdrHistogram up to 2.2.2 and classified as problematic. This issue affects the function org.HdrHistogram.DoubleHistogram.recordValue of the file src/main/java/org/HdrHistogram/DoubleHistogram.java of the component Range Check. Performing a manipulation results in incorrect comparison. This vulnerability is identified as CVE-2026-14686. The attack is only possible with local access. Additionally, an exploit exists. The project was informed of the problem early through an issue report but has not responded yet.