Aggregator

Один запрос до авторизации способен поставить корпоративную систему под полный контроль.

青少年的阅读、数学和科学成绩降至 2000 年国际 PISA 测试启动以来的最低水平，15 岁学生的阅读能力相当于过去低一岁学生的水平。经合组织（OECD）将成绩下滑归因于屏幕使用时长增加、出于兴趣的阅读减少以及数字设备带来的干扰。OECD 还发现，经常将 AI 聊天机器人用于起草论文或总结文本等任务的学生，其科学成绩平均低了 20分，相当于一年的学习差距。PISA 阅读成绩指数于 2012 年达到 501 分的最高值，到去年降至了 466 分。OECD 秘书长 Mathias Cormann 表示：“在阅读上，屏幕使用时长的增加和兴趣阅读的减少，与成绩下滑有着密切联系。我们还观察到更多‘仓促阅读’的现象，即学生匆忙浏览文本后给出草率且错误的答案。”研究还发现，富裕家庭学生阅读成绩下滑幅度更明显。由于阅读水平下降，青少年在科学和数学上也处于本世纪以来的最低水平。科学成绩从 2009 年 506 分的最高值降至 486 分，数学成绩则从 502 分降至 469 分。东亚地区表现最出色。参与测试的中国城市、日本、韩国、新加坡和台湾等拥有最优秀的教育体系，其它地区仅有英国和爱沙尼亚跻身阅读、数学和科学的前十名。

Veradigm said access was limited to a specific interface, and did not impact the company’s broader environment such as its networks, servers or databases. The incident did not result in operational disruptions, the company added.

Новые железосодержащие минералы способны удерживать водород на глубине около 2900 км миллиарды лет.

Multiple espionage-motivated threat actors have rapidly adopted a newly discovered exploit kit that chains Chrome browser and Microsoft Windows vulnerabilities to deploy backdoors and surveillance tools against government, defense, and commercial targets worldwide. Security researchers at Proofpoint have named the kit “BlueMoon,” identifying its use by at least four distinct threat clusters since late August […]

The post Hackers Chain Chrome and Windows Zero-Days in New BlueMoon Exploit Kit Attacks appeared first on Cyber Security News.

U.S. cybersecurity and intelligence agencies say that six Chinese AI companies conducted industrial-scale distillation attacks on American frontier AI models since at least late 2024. [...]

Healthcare technology company Veradigm Inc. disclosed that a cybersecurity incident at one of its third-party vendors exposed sensitive patient data, including Social Security numbers, for a limited group of the company’s customers. The disclosure, filed with the U.S. Securities and Exchange Commission on September 8, 2026, marks the latest in a string of vendor-related breaches […]

The post Veradigm Confirms Patient Data Exposed in Third-Party Data Breach appeared first on Cyber Security News.

Люди у руля уже спорят не о возможностях технологии, а о том, успеют ли сохранить контроль.

These are the top threats you should know about this week.

A forum actor posting as 2019 is selling what they describe as the patient database of Blossom Health, a virtual psychiatric care platform in the United States that provides online therapy and medication management for conditions including anxiety, depression, ADHD, autism, bipolar disorder and OCD.

Multiple espionage-motivated threat activity clusters have been found deploying a previously undocumented exploit kit called BlueMoon that chains together multiple vulnerabilities in Microsoft Windows and Google Chrome. The first in-the-wild use of BlueMoon has been attributed to the China-aligned state-sponsored group tracked as APT31 (aka Bronze Vinewood, Judgement Panda, JungleBamboo,

A Google Chrome bug identified in August was exploited by at least four China-linked cyber-espionage groups, according to researchers.

Recently, ANY.RUN researchers uncovered N0va, a new phishkit targeting organizations across North America and the EU, including government, technology, consulting, and healthcare.  What makes N0va especially relevant for SOC leaders is how it spreads the attack across different layers. Legitimate authentication, trusted brand lures, compromised websites, and cloud infrastructure can leave security teams with only part of the picture, […]

The post New N0va Phishkit Targets North America and EU: A Growing Identity Risk for SOCs   appeared first on Cyber Security News.

Submit #911136 / VDB-401815

GTIG увидела системы, которые сканируют инфраструктуру, меняют IP и добывают секреты почти без человека.

为遵守欧洲的数字市场法律《Digital Markets Act（DMA）》，Google 宣布将调整欧洲的搜索服务，提升 Expedia 和 Hotels.com 等竞争对手比价服务的权重，移除酒店、航空公司和餐厅搜索结果中的部分实时信息功能。Google 高级副总裁 Nick Fox 表示，“这些改变降低（degrade）了欧洲用户的体验——以牺牲本地企业为代价提升了在线中介平台的地位，移除了用户每天依赖的实用功能。”DMA 禁止科技巨头在排名中给予自家服务高于第三方服务的待遇。搜索排名仍然由 Google 的算法决定，这意味着搜索巨人在搜索结果的展示方式上仍掌握着很大程度的控制权。Google 尚未披露欧洲用户何时会看到这些改变。

Submit #881885 / VDB-401814

Submit #911140 / VDB-401813

Submit #911138 / VDB-401812