Aggregator

In this Help Net Security interview, Itamar Apelblat, CEO of Token Security, walks through findings from the company’s research, which shows that 65% of agentic chatbots have never been used yet still hold live access credentials. He explains why organizations treat AI agents more like quick experiments than governed identities, and why that creates risks similar to orphaned service accounts, only harder to see. The conversation covers why 51% of external agent actions still rely … More →

The post AI agent intent is a starting point, not a security strategy appeared first on Help Net Security.

好的，我现在需要帮用户总结这篇文章的内容，控制在100字以内。首先，我得仔细阅读文章，理解主要信息。 文章提到《纽约时报》记者John Carreyrou调查后认为Adam Back是比特币创始人中本聪，但Back本人否认了这一点。Adam Back是英国密码学家，发明了Hashcash系统，之前也多次被怀疑是中本聪。Carreyrou的调查基于芬兰程序员Martti Malmi公开的邮件，分析了Back的写作风格、意识形态和技术背景。而Back则回应说他不是中本聪，但确实很早就参与了密码学和隐私技术的研究。 接下来，我需要将这些信息浓缩到100字以内。要抓住关键点：记者的调查结果、Back的否认、他的背景以及调查依据。同时，要确保语言简洁明了。 可能的结构是：先点出记者的结论和Back的否认，然后说明调查依据和Back的研究背景。这样既全面又简洁。 最后检查字数，确保不超过限制，并且表达清晰。 《纽约时报》记者 John Carreyrou 调查称英国密码学家 Adam Back 可能是比特币创始人中本聪，但 Back 予以否认。Carreyrou 的调查基于芬兰程序员 Martti Malmi 公开的邮件，认为 Back 的写作风格、意识形态和技术背景与中本聪相符。Back 表示他并非中本聪，但承认早年积极参与电子现金和隐私技术研究，并开发了 Hashcash 系统。

纽时记者 John Carreyrou 在调查之后宣称 Adam Back 是比特币作者中本聪，Adam Back 本人公开否认。Adam Back 出生于 1970 年，是一位英国密码学家和密码朋克，工作量证明系统 Hashcash 的作者，这不是第一次他被认为是比特币作者。Carreyrou 是知名的调查记者和作家，他的调查认为，Back 的写作风格、意识形态、技术背景以及早年发表的帖子都与中本聪有重合之处。他的调查主要是基于芬兰程序员 Martti Malmi 公开的数百封与中本聪交流的电子邮件。Back 通过其 X 账号回应称，他不是中本聪，但他早年非常关注密码学、网络隐私和电子现金的积极社会影响，因此从 1992 年左右开始积极参与电子现金和隐私技术的应用研究，在密码朋克邮件列表中参与讨论，最终促成了 Hashcash 等创意的诞生。

A vulnerability classified as critical was found in Microsoft Windows. Impacted is an unknown function of the component Kernel. Executing a manipulation can lead to race condition. This vulnerability is handled as CVE-2025-62215. It is possible to launch the attack on the local host. Additionally, an exploit exists. It is advisable to implement a patch to correct this issue.

A vulnerability classified as critical has been found in Microsoft Windows. Affected is an unknown function of the component Management Console. The manipulation leads to improper neutralization. This vulnerability is referenced as CVE-2025-26633. The attack can only be performed from a local environment. Furthermore, an exploit is available. It is recommended to apply a patch to fix this issue.

A vulnerability marked as problematic has been reported in SQLite up to 3.50.1. The impacted element is an unknown function of the component Aggregate Term Handler. This manipulation causes numeric truncation error. This vulnerability is handled as CVE-2025-6965. The attack can be initiated remotely. Additionally, an exploit exists. It is suggested to upgrade the affected component.

A vulnerability was found in Microsoft Windows and classified as critical. This impacts an unknown function of the component DWM Core Library. The manipulation results in heap-based buffer overflow. This vulnerability was named CVE-2025-59254. The attack needs to be approached locally. In addition, an exploit is available. A patch should be applied to remediate this issue.

A vulnerability identified as problematic has been detected in horilla 1.3.0. This impacts the function eval of the component Query Parameter Handler. Performing a manipulation results in improper neutralization of directives in dynamically evaluated code. This vulnerability is cataloged as CVE-2025-48868. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. You should upgrade the affected component.

A vulnerability labeled as critical has been found in 7-zip. This affects an unknown part of the component ZIP File Parser. The manipulation results in path traversal. This vulnerability is reported as CVE-2025-11001. The attack can be launched remotely. Moreover, an exploit is present. The affected component should be upgraded.

好的，我现在需要帮用户总结一篇文章的内容，控制在100字以内。首先，我得仔细阅读文章内容，抓住主要信息。 文章主要讲华硕不会为Intel的Core Ultra 200S Plus系列桌面处理器推出新主板，因为现有的800系列主板已经兼容。这样用户可以继续使用旧主板升级CPU，节省成本。其他厂商如技嘉和微星则扩展了Z890产品线。华硕之前已经更新过产品线，所以这次没有新动作。此外，厂商可能还在考虑转向新的LGA-1954平台。 接下来，我需要将这些信息浓缩到100字以内。重点包括华硕的决定、原因、其他厂商的做法以及背景因素。 最后，确保语言简洁明了，不使用复杂的术语，直接传达核心内容。 华硕确认不会为Intel Core Ultra 200S Plus系列桌面处理器推出新主板，现有800系列主板已兼容。玩家可直接在Z890主板上更换新CPU升级。技嘉和MSI则扩展了Z890产品线。华硕已更新过Z890产品线，并将精力转向LGA-1954平台支持。

После Artemis II и следующих миссий наука уже не будет прежней.

AI agents are executing consequential tasks autonomously, often across multiple systems and with little record of what they did or why. Asqav, a Python SDK released under the MIT license, addresses that gap by attaching a cryptographic signature to each agent action and linking entries into a hash chain. The signing algorithm is ML-DSA-65, standardized under FIPS 204 and designed to remain secure against quantum computing attacks. Each signature also carries an RFC 3161 timestamp. … More →

The post Asqav: Open-source SDK for AI agent governance appeared first on Help Net Security.

A CVSS score 7.3 AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Anonymous' was reported to the affected vendor on: 2026-04-09, 17 days ago. The vendor is given until 2026-08-07 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Michael DePlante (@izobashi) of TrendAI Zero Day Initiative' was reported to the affected vendor on: 2026-04-09, 17 days ago. The vendor is given until 2026-08-07 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'DongHyeon Hwang (kind_killerwhale)' was reported to the affected vendor on: 2026-04-09, 17 days ago. The vendor is given until 2026-08-07 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'rgod' was reported to the affected vendor on: 2026-04-09, 17 days ago. The vendor is given until 2026-08-07 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 3.1 AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N severity vulnerability discovered by 'TrendAI Zero Day Initiative' was reported to the affected vendor on: 2026-04-09, 17 days ago. The vendor is given until 2026-08-07 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'rgod' was reported to the affected vendor on: 2026-04-09, 17 days ago. The vendor is given until 2026-08-07 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.