Inside the AI Threat Landscape: From Jailbreaks to Prompt Injections and Agentic AI Risks
生成式AI已从内容生成工具发展为具备自主行动能力的智能系统，在企业中发挥重要作用。然而，这也带来了新的安全威胁，包括API攻击、jailbreak和prompt injection等风险。文章探讨了这些威胁如何影响企业，并强调保护API的重要性以应对未来AI系统的独立运作挑战。
Aggregator
Investigate your dependencies with Deptective
9 months 1 week ago
Deptective 是一个开源工具，用于自动检测程序运行时所需的依赖包。通过追踪系统调用和分析缺失文件，它能够识别并安装必要的依赖项。支持 Linux、macOS 和 Windows 平台，并使用 Docker 容器进行环境隔离测试。
CVE-2020-9843 | Apple iOS/iPadOS up to 13.4.1 WebKit cross site scripting (HT211168 / Nessus ID 241427)
9 months 1 week ago
A vulnerability, which was classified as problematic, has been found in Apple iOS and iPadOS up to 13.4.1. Affected by this issue is some unknown functionality of the component WebKit. The manipulation leads to cross site scripting.
This vulnerability is handled as CVE-2020-9843. The attack may be launched remotely. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2020-9843 | Apple iTunes up to 12.10.6 on Windows WebKit cross site scripting (HT211178 / Nessus ID 241427)
9 months 1 week ago
A vulnerability, which was classified as problematic, has been found in Apple iTunes up to 12.10.6 on Windows. Affected by this issue is some unknown functionality of the component WebKit. The manipulation leads to cross site scripting.
This vulnerability is handled as CVE-2020-9843. The attack may be launched remotely. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2020-9843 | Apple iCloud up to 7.18/11.1 on Windows WebKit cross site scripting (HT211179/HT211181 / Nessus ID 241427)
9 months 1 week ago
A vulnerability was found in Apple iCloud up to 7.18/11.1 on Windows and classified as problematic. Affected by this issue is some unknown functionality of the component WebKit. The manipulation leads to cross site scripting.
This vulnerability is handled as CVE-2020-9843. The attack may be launched remotely. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2020-9843 | Apple watchOS up to 6.2.4 WebKit cross site scripting (HT211175 / Nessus ID 241427)
9 months 1 week ago
A vulnerability was found in Apple watchOS up to 6.2.4. It has been rated as problematic. This issue affects some unknown processing of the component WebKit. The manipulation leads to cross site scripting.
The identification of this vulnerability is CVE-2020-9843. The attack may be initiated remotely. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2020-9843 | Apple tvOS up to 13.4.4 WebKit cross site scripting (HT211171 / Nessus ID 241427)
9 months 1 week ago
A vulnerability was found in Apple tvOS up to 13.4.4 and classified as problematic. Affected by this issue is some unknown functionality of the component WebKit. The manipulation leads to cross site scripting.
This vulnerability is handled as CVE-2020-9843. The attack may be launched remotely. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2020-9807 | Apple iCloud up to 7.18/11.1 on Windows WebKit memory corruption (HT211179/HT211181 / Nessus ID 241427)
9 months 1 week ago
A vulnerability, which was classified as critical, was found in Apple iCloud up to 7.18/11.1 on Windows. Affected is an unknown function of the component WebKit. The manipulation leads to memory corruption.
This vulnerability is traded as CVE-2020-9807. It is possible to launch the attack remotely. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2020-9807 | Apple Safari up to 13.1.0 WebKit memory corruption (HT211177 / Nessus ID 241427)
9 months 1 week ago
A vulnerability, which was classified as critical, was found in Apple Safari up to 13.1.0. This affects an unknown part of the component WebKit. The manipulation leads to memory corruption.
This vulnerability is uniquely identified as CVE-2020-9807. It is possible to initiate the attack remotely. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2020-9807 | Apple tvOS up to 13.4.4 WebKit memory corruption (HT211171 / Nessus ID 241427)
9 months 1 week ago
A vulnerability was found in Apple tvOS up to 13.4.4. It has been rated as critical. This issue affects some unknown processing of the component WebKit. The manipulation leads to memory corruption.
The identification of this vulnerability is CVE-2020-9807. The attack may be initiated remotely. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
不请会计也能报税！一人公司电子税务局在线报税（零申报）实操指南
9 months 1 week ago
本文详细介绍了在深圳电子税务局完成首次财务报表报送及季度税费零申报的操作流程，包括登录电子税务局、确认税务信息、填写申报表及零申报的具体步骤，并强调了零申报需注意的事项及合规性要求。
万亿低空经济「起飞」，这家公司想做「低空基础设施」
9 months 1 week ago
可以预见，谁能率先建立起「能飞、能管、能服务」的低空新基建，谁就将掌握这一蓝海的未来主航道。
2025 车市大洗牌：有人半年卖出 200 万辆，有人却快掉队了
9 months 1 week ago
谁能拿到下一轮竞赛的入场券？
macOS 有了新的磁盘映像格式，Let’s Encrypt 开始签发 IP 地址证书
9 months 1 week ago
macOS 26 Tahoe 引入 ASIF 磁盘映像格式，提升虚拟化和文件传输效率；Let's Encrypt 开始为 IP 地址签发短期 TLS 证书，方便自托管但存安全隐患。
Handala
9 months 1 week ago
You must login to view this content
cohenido
maven tips
9 months 1 week ago
文章介绍了如何使用 Maven 下载指定包到特定路径以及查看插件的 Goals。通过 `mvn dependency:get` 命令下载包并指定本地仓库路径；使用 `mvn help:describe` 查看插件的详细信息及其 Goals。例如，`maven-dependency-plugin` 和 `spring-boot-maven-plugin` 的 Goals 包括构建镜像、生成构建信息、运行应用等操作。
Сначала исчезли файлы. Потом — бизнес. Потом — молчание. Это новая группировка BERT
9 months 1 week ago
Вот что бывает, когда искусственный интеллект решил заняться вымогательством.
Atomic macOS Info-Stealer Updated with New Backdoor for Persistent Access
9 months 1 week ago
The Atomic macOS Stealer (AMOS), a notorious piece of info-stealing malware targeting Apple users, has undergone a significant update, introducing an embedded backdoor for the first time. This development, reported by Moonlock a cybersecurity division of MacPaw marks a critical escalation in the malware’s capabilities, allowing attackers to maintain persistent access to compromised macOS systems. […]
The post Atomic macOS Info-Stealer Updated with New Backdoor for Persistent Access appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
Aman Mishra
BaitTrap: Over 17,000 Fake News Websites Caught Fueling Investment Fraud Globally
9 months 1 week ago
A newly released report by cybersecurity firm CTM360 reveals a large-scale scam operation utilizing fake news websites—known as Baiting News Sites (BNS)—to deceive users into online investment fraud across 50 countries.
These BNS pages are made to look like real news outlets: CNN, BBC, CNBC, or regional media. They publish fake stories that feature public figures, central banks, or financial
The Hacker News
BaitTrap: Over 17,000 Fake News Websites Caught Fueling Investment Fraud Globally
9 months 1 week ago
网络安全公司CTM360报告称，诈骗团伙利用虚假新闻网站（BNS）模仿真实媒体机构发布假新闻，吸引用户点击并引导至欺诈投资平台。这些网站通过谷歌、Meta等平台投放广告，并使用诱骗性标题和官方元素增加可信度。受害者被诱导注册并支付小额押金后，会看到虚假收益模拟界面。骗子还收集敏感数据用于进一步诈骗。CTM360已追踪超1.7万个此类网站，并提供相关支持服务以应对这一威胁。