Aggregator

阅读： 10■ 通告编号NS-2026–0017■ 发布日期 2026–07-15■ 漏洞危害攻击者利用本次安全更新中的漏洞，可造成权限提升、远

编注：很多读者都会好奇少数派的编辑们到底平时都「买了啥」。我们希望通过「编辑部的新玩意」介绍编辑部成员们最近在用的新奇产品，让他们自己来谈谈这些新玩意的使用体验究竟如何。内容声明：《新玩意》栏目如含有

Новая система США определит приоритетные угрозы для финансовой и государственной инфраструктуры.

If you pay for something, you expect it to work as intended. The vendor shouldn’t start turni

SANS Institute says governance programs are still nascent even as AI failures and threats grow

Tenable has announced the expansion of the Tenable One Exposure Management Platform, unifying application security risks with all other exposure data. By integrating static code vulnerability data, Tenable One delivers complete, code-to-runtime visibility across the entire attack surface. Security teams have long struggled with a code security problem where vulnerable code reaches production faster than it can be reviewed. This problem is exacerbated by the use of generative AI, which empowers developers to ship code … More →

The post Tenable One unifies code risks with enterprise exposure data appeared first on Help Net Security.

发表在 PLOS One 上的一项新研究发现，马不依赖声音、气味或过往经验就能识别屏幕上的捕食者。传感器显示，马看到屏幕上的狼后心跳会加速，但面无表情十分镇定。研究显示，马没有摇头，没有摇尾巴，其目光也没有锁定屏幕以表明大脑在处理威胁信息。论文第一作者 Zeynep Benderlioglu 称，马在评估潜在威胁时展现出惊人的认知克制而不是惊吓。在实验中，马看到屏幕上的袋熊时心率平稳，但看到屏幕上的狼——无论狼是在攻击还是梳理——时其心率会显著加快，其中雄性马的反应更强烈。Benderlioglu 说，马的认知处理能力出乎意料的高。它们高度警惕，但威胁并没有出现，所以它们没有表现出任何异常行为，它们正在进行认知评估。”

发表在 PLOS One 上的一项新研究发现，马不依赖声音、气味或过往经验就能识别屏幕上的捕食者。传感器显示，马看到屏幕上的狼后心跳会加速，但面无表情十分镇定。研究显示，马没有摇头，没有摇

Pull the certificate off the flash of a Shark RV2320EDUS robot vacuum, and you can run root commands on other people's Shark vacuums across the same AWS region: watch the camera, drive the robot, read the map of the house, and take the Wi-Fi password in plaintext. A researcher publishing under the handle tokay0 put the method online on Monday, having tested it only against vacuums he

Pull the certificate off the flash of a Shark RV2320EDUS robot vacuum, and you can run root command

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has warned that attackers are actively exploiting CVE-2026-46817, an improper privilege management vulnerability in Oracle E-Business Suite that can lead to a takeover of Oracle Payments. The agency added the issue to its Known Exploited Vulnerabilities Catalog on July 15, 2026, and directed affected federal civilian executive […]

The post CISA Warns of Actively Exploited Oracle E-Business Suite Flaw appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Chinese actors used Claude Code and DeepSeek to automate attacks that breached government systems and targeted financial firms. Hunt.io researchers stumbled onto an active intrusion campaign in June 2026 while pivoting on known TencShell command-and-control infrastructure. A single HTTP header fingerprint on port 1111 led them to 13 Hong Kong-based servers and, on one of […]

Claude Code and DeepSeek Powered Chinese Cyber Espionage Campaign

At Ellipsis Labs, the senior software engineer works inside one of the most security-sensitive layer

据中国国家知识产权局发布第1991期商标公告显示，华为“世界”商标申请已获准撤回。6月23日，华为公司向国家知识产权局提交了商标撤回申请。商标核定使用的商品/服务项目显示为：电动运载工具；汽车仪表板；

This is a follow-up to my previous Terminal DiLLMa research, and there is a positive outcome: Apple fixed a macOS Terminal behavior that enabled a DNS-based data exfiltration technique.

DNS Requests via ANSI Escape Codes

David Leadbeater originally discovered an interesting behavior in the macOS Terminal app that allowed a special sequence of ANSI escape codes to issue DNS requests.

In short, this triggered a DNS request from the macOS Terminal app:

Lineation.ai has announced the public launch of its comprehensive agentic security platform. Delivering a solution at the intersection of genAI application security and runtime defense, lineation introduces a zero trust unified control plane and a lightweight endpoint daemon that secures autonomous AI agents directly at execution. As enterprises adopt autonomous AI agents that read sensitive data, call APIs, and execute workflows, traditional static perimeters and standard LLM gateways fall blind. By assigning a Zero Trust … More →

The post Lineation.ai focuses on runtime security for autonomous AI agents appeared first on Help Net Security.

GRAHAM CLULEY

Формально баланс обнулят. На деле операторы просто начнут зачислять те же деньги чуть позже.