Aggregator

I got my phone back from the police after it was seized in a search warrant. After sta

Новое исследование: для ветеранов ИИ — напарник, для новичков — головная боль.

微软发布Windows 11 25H2预览版，作为次要更新提供新功能和改进。使用Release Preview通道的用户可通过Windows更新手动下载升级。下周将发布ISO镜像供手动测试。该版本删除部分旧功能，并支持商业用户通过企业版和WSUS获取更新。

Либо верь промокоду, либо прощайся с криптой — Gambler Panel превращает игру в кассу.

WhatsApp修复了可能导致零日攻击的安全漏洞CVE-2025-55177，并指出该漏洞可能与苹果的CVE-2025-43300结合使用。受影响版本包括iOS和Mac的WhatsApp应用。建议受影响用户重置设备并更新软件以防范威胁。

WhatsApp has addressed a security vulnerability in its messaging apps for Apple iOS and macOS that it said may have been exploited in the wild in conjunction with a recently disclosed Apple flaw in targeted zero-day attacks. The vulnerability, CVE-2025-55177 (CVSS score: 5.4), relates to a case of insufficient authorization of linked device synchronization messages. Internal researchers on the

《机械迷城》是一款经典冒险解谜游戏，本周在Epic商店限时免费领取。玩家将扮演小机器人Josef，在机械城市中通过解谜和机关拯救被绑架的女友Berta，并阻止邪恶机器人的炸弹阴谋。游戏以温暖的手绘风格和无对白叙事呈现独特世界。

埃隆·马斯克旗下xAI推出编码模型Grok Code Fast 1，辅助开发者编写代码并修复错误。该模型基于编程语料库训练，支持多种编程语言，在低监督下高效完成任务。目前通过Cursor、GitHub Copilot等平台限时免费提供，并计划推出新版本以增强功能。

微软调查报告确认Windows 11更新与固态硬盘掉盘事件无关。部分用户反映安装更新后硬盘故障，表现为格式化为RAW且无法识别。微软称未发现关联性，并将持续关注反馈。问题可能与硬件组合或软件有关。用户需谨慎处理大量数据写入操作以避免故障。

As part of the Month of AI Bugs, serious vulnerabilities that allow remote code execution via indirect prompt injection were discovered. There was a period of a few weeks where multiple arbitrary code execution vulnerabilities existed in popular agents, like GitHub Copilot, Amazon Q, AWS Kiro,…

During that time I was wondering if it would be possible to write an AI virus.

Hence the idea of AgentHopper was born.

本文介绍了AgentHopper项目，一种基于AI的恶意软件概念验证。通过利用GitHub Copilot等工具中的漏洞，该恶意软件可自动传播并感染开发者的代码库。研究展示了AI工具的安全风险，并提供了防护建议。

Currently trending CVE - Hype Score: 16 - In gpu_pixel_handle_buffer_liveness_update_ioctl of private/google-modules/gpu/mali_kbase/mali_kbase_core_linux.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. ...

一个Reddit社区r/netsecstudents为网络安全学生提供资源分享、问题解答和互助学习的平台。一位用户询问是否有其他学生愿意分享课程大纲和实验室项目，以帮助他准备CCNA考试并获取更多实验思路。

用户在旧硬盘中发现多个iTunes备份文件夹（2012-2015年），但只能成功恢复2015年的备份。尝试复制文件夹、使用第三方工具等方法均未成功恢复更早数据。主要目标是恢复旧照片和短信用于法律用途，并愿意付费寻求专业帮助。

The U.S. Attorney’s Office for the District of New Mexico announced Thursday that federal authorities have executed a court-authorized seizure of two domain names and one affiliated blog associated with VerifTools, an online marketplace peddling counterfeit driver’s licenses, passports, and other state- and country-issued identity documents.  Operating under the banner of VerifTools since 2020, the […]

The post U.S. Government Seizes Online Marketplaces Used to Sell Fraudulent Identity Documents to Cybercriminals appeared first on Cyber Security News.

Revenge AI 是一个基于 AI 的云逆向工程平台，通过智能模型和算法提前分析并阻止威胁。与昂贵的传统工具不同，该 SaaS 平台按需付费，提供更准确的结果和高效决策支持。

作者分享了一篇关于音乐的系列文章，介绍了他喜欢的专辑和歌曲，并以七夕为主题推荐了Adrianne Lenker的《born for loving you (live)》，展现了专辑的现场感与温暖氛围。

📖 Overview
A new domain-based indicator has been identified linked to botnet command-and-control infrastructure for apk.hook (HookBot). The domain, hosted under Hetzner (AS24940), is tied to ERMAC v3.0 activity and represents a high-confidence threat to Android devices targeted by banking trojans.

📌 Key Details

FieldInformationTypeDomain

We say this just about every time the subject comes up (which is often, given our industry and role in it), but valid information security is not a state of being. It is a moving target and a process. Achieving certification for a certain level of security is a snapshot of a moment in time, […]

The post FedRAMP Monthly ConMon vs Annual Assessments appeared first on Security Boulevard.

《时代》杂志于 8 月 28 日发布 2025 年度《全球 AI 领域百大影响力人物》榜单，任正非、梁文峰等人位列「领导者」类别；小米宣布召回 2024 年 8 月-2024 年 9 月期间生产的部分充电宝，共计 146891 台。