Aggregator

网络数据安全风险评估机制的重要意义在于，它将风险控制的端口前移，通过系统化、常态化的风险识别与研判，为网络数据安全保护提供了具有预见性的决策基础，对于维护国家数据主权、保障公共利益和促进数字经济健康发展具有里程碑式的制度价值。

“观看广告领取福利”“观看广告解锁免费时长”……这些弹窗广告在网络场景中十分常见。然而，国家安全机关工作发现，境外间谍情报机关正利用弹窗广告开展情报搜集、目标筛选和思想渗透等活动，对我国家安全构成威胁。

智能体技术安全治理面临一系列新挑战。一是安全涌现性的管控，二是可扩展的监管体系，三是跨组织协作的信任联邦。智能体技术正在开启人机协作新纪元，必须将“智能向善”理念转化为可执行、可验证、可审计的安全技术架构，才能真正释放其潜力。

OpenAI introduces new Daybreak tools, including Codex Security and GPT-5.5-Cyber, to help organizations find, validate, and patch vulnerabilities at scale.

OpenAI introduces Patch the Planet, a Daybreak initiative helping open-source maintainers find, validate, and fix vulnerabilities with AI and expert review.

安全研究团队 Aikido 于2026年6月检测到 JetBrains 插件市场中一批协同恶意插件，共计15款，累计安装量接近7万次，均会在用户保存 AI 服务商 API 密钥的瞬间将其静默外泄至攻击者服务器。

告别零散技巧，学透提示词越狱全链路攻防

修个代码就被封杀？Anthropic直呼冤枉。

看雪论坛作者ID：LeoChen..

勒索攻击正在贴近业务系统

Документ стал мягче, хотя кое-какие вопросы к нему всё же остались.

上周关注度较高的产品安全漏洞(20260615-20260621)

国家信息安全漏洞共享平台（以下简称CNVD）本周共收集、整理信息安全漏洞400个，其中高危漏洞219个、中危漏洞106个、低危漏洞75个。

据悉该平台遭未授权人员远程触发

教育、科技、人才三位一体，教育强国、科技强国、人才强国、网络强国、数字中国战略的落地，归根结底要靠大批高素质人才。

剖析传统MDR诸多短板，解读AI安全运营中心的变革思路与价值。

China’s cyber operations have evolved far beyond what most people imagine when they picture a state-sponsored hacker. Instead of lone government agents breaking into servers, the country now runs an intricate web of private companies, contractors, and data brokers that collectively carry out espionage on behalf of its intelligence services. The scale and sophistication of […]

The post Chinese Cyber Contractors Use Malware, Botnets, and Stolen Data to Enable State Operations appeared first on Cyber Security News.

North Korean hackers have turned a widely used developer tool into a weapon, quietly poisoning more than 140 software packages that developers across the world rely on every day. The campaign is sophisticated, stealthy, and far-reaching, raising urgent questions about the safety of the open-source supply chain. The attack targeted the Mastra ecosystem on the […]

The post North Korean Hackers Abuse Mastra npm Supply Chain to Target Developers and CI/CD Pipelines appeared first on Cyber Security News.