Aggregator

AI如何重塑网络攻击行动

Microsoft Windows WalletService is affected by a local privilege escalation vulnerability tracked as CVE-2026-49176. This flaw could allow a standard authenticated user to obtain SYSTEM-level privileges. The vulnerability arises from WalletService’s handling of user-controlled file paths during initialization. An attacker can exploit this by redirecting the service to a maliciously crafted Extensible Storage Engine (ESE) […]

The post Windows WalletService Flaw Lets Standard Users Gain SYSTEM Privileges appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

过去两年行业热议AI颠覆漏洞产业，平安PSRC关停等事件指向"白帽子末日"。但换个角度看：AI非但没削弱攻击者，反而让它的不对称优势达到历史巅峰——这才是被刻意回避的真相。

过去一周欧洲的法国、西班牙和苏格兰，以及北美的美国和加拿大都有野火肆虐。其中法国的火势甚至形成了被称为“火积云”的现象，极大的增加了灭火的难度。“火积云”会导致其移动路径上的一切物体燃烧，如果云层还形成了闪电，那么闪电将会极大的助长火势。气候科学家表示，全球气温仍将继续升高，随着气温上升，森林会变得干燥，野火的规模、强度和频率也会增加。情况不会好转只会恶化。人类可能需要养成购买空气净化器和戴口罩的习惯。加拿大由于北方森林辽阔，大部分地区没有道路，因此灭火难度很大。相比下美国的森林面积更小，道路网发达，能适应频繁发生的低强度火灾。

A new developer-focused project, usbliter8-fun, showcases an iOS 27 jailbreak workflow specifically for the iPhone 11 Pro. It combines the usbliter8 SecureROM exploit with a custom firmware restoration process. This proof of concept targets Apple’s A13-based iPhone 11 Pro. It is labeled as experimental, destructive, and unsuitable for use on primary devices. New usbliter8 SecureROM […]

The post New usbliter8 SecureROM Exploit Enables iOS 27 Jailbreak on iPhone 11 Pro appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

GitHub has announced a new cooldown mechanism in Dependabot, allowing the tool to wait at least three days after a release is published before opening a pull request. "The cooldown configuration option in the dependabot.yml still controls the behavior, though, so you can choose a different cooldown parameter that fits your project," the Microsoft-owned subsidiary said. According to GitHub, the

Директор по продажам с зарплатой 800 тысяч уволена из-за китайской нейросети.

Microsoft has introduced KMS Hardware-Secured, an upcoming enhancement to Windows Server activation that utilizes Trusted Platform Module (TPM)-based attestation to validate Key Management Service (KMS) hosts before they can activate Windows devices. Announced in a July 2022 Windows IT Pro Blog post, this initiative addresses risks related to spoofed, cloned, or otherwise untrusted KMS infrastructure. […]

The post Microsoft Introduces KMS Hardware-Secured for Windows Server Activation appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Submit #862473 / VDB-383384

Пока нейросеть ломала защиту Hugging Face, Альтман праздновал будущее.

Submit #858829 / VDB-180225

Fastjson2 是阿里巴巴开源的 Java JSON 解析库重构升级版，凭借其高性能和简洁的 API 在国

AWS has launched Anthropic’s Claude Opus 5 on Amazon Bedrock and the Claude Platform, introducing a groundbreaking model designed for agentic coding, complex enterprise workflows, visual understanding, and long-running autonomous tasks. Released on July 24, 2026, Claude Opus 5 is Anthropic’s first fifth-generation Opus model. According to AWS, it offers significant improvements in production-grade reasoning, […]

The post AWS Launches Claude Opus 5 With Advanced Agentic Coding and Cybersecurity Capabilities appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Submit #799055 / VDB-383383

Submit #798905 / VDB-383382

速修复

速修复

在纽约州通过法律要求提高广告中 AI 生成人物的透明度之后，亚马逊要求第三方卖家标记包含 AI 生成人物的产品图像或视频。亚马逊表示这是为了遵守法律，并澄清该要求不适用于包含电视/游戏/电影角色或包含真人的内容，即使这些内容用 AI 进行了处理。第三方卖家占亚马逊商品销售额的六成以上。目前美国尚无全国性法律要求企业披露 AI 生成的广告内容，但 YouTube、Meta、Pinterest 和 TikTok 等平台已经为 AI 生成内容添加了标签。

A vulnerability categorized as problematic has been discovered in WPBot Plugin up to 8.5.1 on WordPress. This impacts an unknown function. The manipulation results in sql injection. This vulnerability is known as CVE-2026-14189. It is possible to launch the attack remotely. No exploit is available. It is advisable to upgrade the affected component.

A vulnerability was found in 微信二维码登陆 Plugin up to 1.3 on WordPress. It has been rated as critical. This affects an unknown function. The manipulation leads to improper authentication. This vulnerability is traded as CVE-2026-13597. It is possible to initiate the attack remotely. There is no exploit available.