Aggregator

Fake helpdesk callers use Microsoft Teams and Quick Assist to access employee computers, where attackers install new GoGRPC backdoor in suspected ransomware operations

一次看似普通的线上面试，可能就是一条针对 Web3 从业者的窃密攻击链。

A serious Linux kernel zero-day vulnerability capable of local privilege escalation (LPE) has been uncovered by security researchers, underscoring both the growing role of artificial intelligence in vulnerability research and the persistent security risks within complex kernel subsystems. Tracked as CVE-2026-53264, the flaw impacts the Linux kernel’s net/sched packet scheduling subsystem. It stems from a […]

The post AI-Assisted Research Uncovers Linux Kernel Zero-Day Enabling Root Privilege Escalation appeared first on Cyber Security News.

Chinese state-linked hackers are increasingly relying on a covert multi-hop infrastructure dubbed RedRelay (also known as ORBWEAVER) to mask the origins of global cyber operations, with evidence pointing to little-known Guangdong Chanming as a key enabler behind the network. Guangdong Chanming, a low‑visibility company with no public‑facing products or marketing, has quietly amassed a portfolio […]

The post Chinese Hackers Use RedRelay Multi-Hop Network to Conceal Global Cyber Operations appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A researcher recently disclosed an AI-assisted Linux kernel zero-day vulnerability, tracked as CVE-2026-53264, which allows local privilege escalation to root on affected systems. This flaw is found in the Linux packet scheduling subsystem (net/sched) and arises from a use-after-free condition involving traffic-control action objects. AI-Discovered Linux Kernel Zero-Day Star Labs researcher developed a reliable exploit […]

The post AI-Discovered Linux Kernel Zero-Day Enables Root Privilege Escalation appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

俄情报机构把乌克兰战场上用惯的招募套路搬进了北约腹地。独立媒体Vot Tak的调查显示,立陶宛、波兰、拉脱维

2026年7月20日,Politico一篇不到千字的独家报道,把整个华盛顿情报和安全圈炸出了一堆问号。FBI

То, что должно было подтверждать личность, стало инструментом для её подмены.

回声定位是蝙蝠鲸鱼等动物导航寻路的一种方式。2021 年研究人员在《PLOS One》上发表论文称，盲人和视力正常的人都可以通过发出滴答声（clicks）学会回声定位。上个月研究人员在《Cerebral Cortex》期刊上发表了一项后续研究，称人类能在十周内学会回声定位。26 名参与者接受了 10 周的回声定位训练，研究人员调查了训练对其大脑结构的影响。研究团队分析了 V1（初级视觉皮层，负责处理视觉信息）和 A1（初级听觉皮层，负责处理声音信息）的脑部扫描图像。结果显示，盲人和视力正常的人的 V1 区域对声音回声的敏感性都得到了提升。这进一步证明，大脑的适应能力都很强。

速修复

Currently trending CVE - Hype Score: 9 - Improper authorization in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges over a network.

Leading incident response team launches AI Cybersecurity Services in wake of rising AI-assisted code development.

The post Sygnia Penetration Test Reveals Critical “vibe coded” Vulnerabilities Within Claude-Based Application appeared first on Sygnia.

“数字泔水”是指在算法推荐和流量逻辑驱动下规模化生产的低质有害内容，主要表现为感官刺激和虚构叙事型、伪知识资讯和认知误导型、情感煽动和价值观扭曲型、文化解构和审美降格型等形态。“数字泔水”借助算法投喂、社交增压、情境沉浸的叠加……

2026世界人工智能大会近期在上海成功举行，中国提出了一系列推动人工智能治理与国际合作的行动方案和具体举措，并宣布成立世界人工智能合作组织。欧洲媒体与政治人士对此非常关注。

立足数字中国、法治中国建设全局，紧扣数据要素市场化配置改革时代任务，加快出台人工智能健康发展综合性立法，构建统筹创新激励、安全管控、权益保障、全球治理于一体的统一法律制度框架，已经成为时代发展大势与数字治理紧迫任务。

人工智能作为引领新一轮科技革命和产业变革的战略性技术，在2025年更加深入广泛地融入日常生活，持续拓宽学习渠道、提升工作效能、改善生活品质。

近年来，不法分子利用人工智能等新技术实施的违法犯罪活动时有发生，包括实施电信网络诈骗，侵犯个人隐私，破坏社会信任基石，甚至威胁国家安全。对此，公安机关高度重视，采取多种措施打击整治。

支撑装备制造、电子信息、能源、汽车制造等支柱产业数字化转型的软件栈普遍建立在开源基础之上……97%的商用代码库含有开源组件，平均每个应用引入911个开源依赖。开源软件供应链安全风险与治理，成为重要的研究问题。