Aggregator

Сотрудники пересылали фото, звонили коллегам и пользовались мессенджерами за пределами контроля ведомства.

本文是 HackTheBox「Active」靶机的完整渗透记录，目标是一台运行 Windows Server 2008 R2 的域控（域名 active.htb）。整条攻击链由两个经典 AD 缺陷串成： 立足点（GPP cpassword）。 先通过全端口扫描结合 53/88/389/445/3268 等服务确认目标为域控，再利用老旧系统默认允许的 SMB NULL Session 匿名枚举共享，

Experts warn the Jaguar Land Rover breach bears hallmarks of Kremlin-backed hackers, citing novel ransomware, strategic timing and efforts to obscure attribution

OpenAI has started rolling out the GPT-5.6 series models in limited preview to a small group of trusted partners through the API and Codex. The series includes Sol as the flagship model, Terra as a balanced option, and Luna as the fastest and most cost-efficient model. The rollout is being coordinated with the U.S. government before expanding to ChatGPT, Codex, and API users in the coming weeks. “GPT-5.6 Sol launches with our most robust safety … More →

The post GPT-5.6 gets better at cybersecurity appeared first on Help Net Security.

Name: SekaiCTF 2026 (an SekaiCTF event.)
Date: June 27, 2026, 8 a.m. — 29 June 2026, 08:00 UTC  [add to calendar]
Format: Jeopardy
On-line
Offical URL: https://ctf.sekai.team/
Rating weight: 79.25
Event organizers: Project Sekai

火绒个人版6.0功能升级 | 右键管理、系统加固优化

本文所呈现之内容，皆为本人在使用AI工具过程中的实际体验与对效果的客观描述，旨在分享使用感受与技术探索。

With federal PQC deadlines set for 2030 and 2031, CISOs face a multi-year transformation program that most organizations have not yet started. The window for orderly execution is narrowing fast.

The post What the post-quantum executive order really demands of CISOs appeared first on CyberScoop.

Ukraine’s SSU and the FBI Just Confirmed Russian Intelligence Has Been Systematically Hacking Messenger Accounts for Years. The Security Service of Ukraine (SSU), working jointly with the FBI, has formally exposed a sustained Russian intelligence campaign targeting the messaging accounts of government officials, military personnel, politicians, and activists across Ukraine, Europe, and the United States. […]

A vulnerability has been found in F4 Post Tree Plugin up to 2.0.4 on WordPress and classified as critical. The impacted element is an unknown function of the component AJAX Action Handler. Performing a manipulation results in missing authorization. This vulnerability is identified as CVE-2026-9676. The attack can be initiated remotely. There is not any exploit available. The affected component should be upgraded.

Your inbox is an identity system all of its own: whoever owns it may own a lot more

Аферисты используют страх перед БПЛА, чтобы выманить звонок жертвы.

7 月 4 日，腾讯安全沙龙第 9 期深圳站，等你来~

速修复

速修复

速修复

VPN-клиент снова появился в магазине Apple после удаления по требованию Роскомнадзора, но доступность может оказаться недолгой.

暴露规模近年罕见