Aggregator

停产或将持续到11月，3.3万员工“被迫休假”。

创新融合，未来无界！

通过源码分析与加密构造POC，成功实现Fastjson 1.2.41版本的RCE利用，绕过环境限制完成命令执行。

APT组织Lazarus 在Rootkit（获取内核权限）攻击中使用了微软的0day漏洞;APT组织Kimsuky利用软件公司产品安装程序进行伪装展开攻击;NoName057(16)组织DDoSia项目持续更新;

在红队作战的初期阶段中，指纹识别是进行资产梳理与漏洞测绘的核心环节。面对海量的互联网资产，如何快速定位关键

当前环境异常，需完成验证后继续访问。

Nothing发布Ear 3耳机，充电盒内置麦克风及按键；Nvidia投资Intel合作开发定制芯片；Meta推出雷朋Display AI眼镜，支持显示屏与肌电手环交互；罗技发布多款外设新品；华为公布昇腾950芯片架构信息；微软增强Windows 11记事本本地AI功能；浙江移动eSIM业务即将开放。

.OpenAI released $4 GPT Go in August, but it was limited to just India. Now, OpenAI is expanding GPT Go to include new regions. [...]

介绍了Intel® Ethernet Controller I225-V的功能、性能及应用场景。

消息称马云已「强势回归」，阿里巴巴暂无回应；OpenAI 最新研究揭示「AI 阴谋论」；单日票房破 3 亿，电影《731》刷新两项中国影史纪录

文章记录了每周科技动态与观点分享，重点介绍了旧金山铺天盖地的 AI 广告现象及其背后资本推动的原因，并涵盖开源软件更新、风力发电机运输飞机设计等科技新闻，同时推荐了多个工具与 AI 应用，并分享了关于技术选择与职业发展的观点。

文章提供了一个Active Directory PowerShell脚本，用于查询当前域中所有域控制器的操作系统版本及其所在站点位置。

当前环境异常，请进行验证以恢复访问权限。

Cybercriminals are abusing AI-native platforms like Vercel, Netlify, and Lovable to host fake captcha pages that deceive users, bypass detection, and drive phishing campaigns.

A vulnerability, which was classified as critical, was found in Linux Kernel up to 5.15.152/6.1.82/6.6.22/6.7.10/6.8.1. Affected by this issue is the function ntb_register_device. Such manipulation leads to memory leak. This vulnerability is referenced as CVE-2023-52652. The attack needs to be initiated within the local network. No exploit is available. You should upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.7.10/6.8.1 and classified as problematic. Affected by this issue is the function dpll_xa_ref_*_del of the file drivers/dpll/dpll_core.c of the component dpll. Executing manipulation can lead to privilege escalation. The identification of this vulnerability is CVE-2024-27027. The attack needs to be done within the local network. There is no exploit available. It is suggested to upgrade the affected component.