Aggregator

关键词微信核心要点：微软发布 2026 年 9 月例行安全补丁（Patch Tuesday），修复漏洞总数达创

关键词微信核心要点：网络安全机构 Calif 近日公开披露了针对微信（WeChat）音视频呼叫组件的零点击（0

The security researcher known as Chaotic Eclipse has dropped a proof-of-concept (PoC) for yet another zero-day in Microsoft Defender. The vulnerability, codenamed ShieldCrash, is assessed to be a patch bypass for CVE-2026-69414 (CVSS score: 7.8), also called ShieldBreak, which the researcher reported last month. "Microsoft has failed to properly patch ShieldBreak CVE-2026-69414," Chaotic

За последние недели администраторам пришлось обновлять платформу уже в четвёртый раз.

Google has patched 230 vulnerabilities on Tuesday, including another actively exploited Chrome zero-day bug, the seventh such vulnerability patched since the start of the year. [...]

SAP has released security updates to address multiple vulnerabilities, including a maximum-severity flaw in SAP Extended Passport (EPP) Processing that could have a severe impact on the confidentiality, integrity, and availability of the application The vulnerability, tracked as CVE-2026-44756 (CVSS score: 10.0), has been described as a case of memory corruption. Discovered and reported by SAP

《南方公园（South Park）》创作者 Matt Stone 和 Trey Parker 宣布，“受苹果和 Google 的勇敢和爱国精神的启发，我们将把《南方公园》更名为《南方美国（South America）》。”美国总统特朗普上个月签署了行政令，将安大略湖（Lake Ontario）更名为美国湖（Lake America），去年他下令将墨西哥湾（Gulf of Mexico）更名为“美国湾”（Gulf of America）。《南方公园/南方美国》将于 9 月 16 日播出第 29 季第一集，它曾在 27 季刻画了特朗普睡了撒旦并让其怀孕的情节，被白宫抨击是“如垂死蛛丝，用枯竭的灵感，不择手段博取关注”。

Currently trending CVE - Hype Score: 7 - Eval injection in cPanel 11.138.0.0 and earlier allows remote authenticated users to execute arbitrary code as root.

Currently trending CVE - Hype Score: 7 - Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. ...

Мир подошёл к моменту, когда одной осторожности разработчиков уже недостаточно.

许多女性在孕期或使用口服避孕药时，经常会有忘记物品摆放、难以集中注意力的经历。这种常被戏称为“孕傻” （Mom Brain）的现象，长期以来缺乏明确的生物学解释。发表在《Science Bulletin》上的一项研究揭示了持续水平高雌激素并非直接作用于记忆中枢，而是通过干扰一条特定的“下丘脑-海马”神经环路，从而暂时性损害记忆功能，从机制层面解答了高水平雌激素影响认知的生物学基础。研究人员首先构建了模拟孕期持续高雌激素水平的小鼠模型，发现高雌激素会引起可逆的记忆损伤，但并不影响情绪或探索动机，表明这是一种特异性的认知效应。在机制层面，研究团队发现，外侧下丘脑中占主导地位的雌激素受体集中在GABA能神经元上。这类神经元通常向大脑其他区域发送抑制性信号。单核RNA测序与电生理实验表明，高雌激素水平会抑制这些神经元中的GABA-A受体信号，导致其自发放电频率显著增加。当特异性敲除这些下丘脑神经元中的雌激素受体后，小鼠中由高雌激素及孕期本身引起的记忆损伤均得到恢复。进一步神经环路追踪显示，这些过度活跃的下丘脑神经元直接投射到海马CA3区（记忆形成的关键枢纽）。利用化学遗传学技术，研究人员证明：沉默这一“下丘脑-海马”通路可保护小鼠免受高雌激素诱导的记忆损伤；而在无雌激素升高的情况下，人工激活同一通路本身已足以损害记忆。研究表明，低水平、周期性的雌激素暴露主要作用于海马，维持认知功能；但持续高水平的雌激素暴露则主要激活了以下丘脑为中心的神经通路。这一不同作用靶区的发现，成功调和了该领域长期存在的争议。

Миллиарды уже на горизонте, но до новой вычислительной столицы ещё далеко.

速修复

速修复

Tencent’s Zhuque Lab built AI-Infra-Guard, an open-source security scanner for AI systems. It fingerprints running services such as Ollama, vLLM and ComfyUI and checks them against more than 1,600 known CVEs, inspects MCP servers and agent skills across 14 categories of risk, and runs jailbreak evaluations against a target model. To check a skill, the platform asks a language model whether it looks malicious. Zhuque Lab scores that call against SkillTrustBench, a public set of … More →

The post AI-Infra-Guard: Open-source security scanner for AI systems appeared first on Help Net Security.

Пентагон больше не собирается беречь каждый беспилотник.

In the Gartner report Validate the Promises of AI SOC Agents With These Key Questions, analysts Craig Lawson and Andrew Davies posit that “By 2028, 70% of large SOCs will pilot AI agents to augment Tier 1 and Tier 2 operations, but only 15% will achieve measurable improvements without structured evaluation.” Just last year, Gartner placed AI SOC Agents at the Innovation Trigger stage with single-digit adoption. As of earlier this year, Gartner’s Hype Cycle … More →

The post Gartner: 70% of SOCs will pilot AI agents. Only 15% will see results appeared first on Help Net Security.

A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by '06fe5fd2bc53027c4a3b7e395af0b850e7b8a044' was reported to the affected vendor on: 2026-09-09, 2 days ago. The vendor is given until 2027-01-07 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Anonymous' was reported to the affected vendor on: 2026-09-09, 2 days ago. The vendor is given until 2027-01-07 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Anonymous' was reported to the affected vendor on: 2026-09-09, 2 days ago. The vendor is given until 2027-01-07 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.