Aggregator
Zombie linkages are keeping expired domains trusted for years
Domains expire, get transferred, and return to the market every day. The systems connected to those domains can continue trusting the original owner long after control has changed. Researchers at USC and the University of Twente examined this problem in three widely used systems: Web PKI, Maven Central, and Ethereum Name Service. They use the term “zombie linkages” to describe lingering trust records that remain active after the original domain owner no longer controls the … More →
The post Zombie linkages are keeping expired domains trusted for years appeared first on Help Net Security.
Сюрприз в куче. В NGINX нашли ошибку, которая 18 лет позволяла взламывать серверы без пароля
等了 5 年,Everything 1.5 Beta 正式发布|附升级指南
お知らせ:JPCERT/CC インターネット定点観測レポート[2026年1月1日~2026年3月31日]
The AI oversight paradox: Is the investment worth the cost of watching it?
Unlike in 2025, when AI adoption and testing drove business strategies, organizations in 2026 want proven ROI before committing budgets, according to a report by Globalization Partners. How global executives characterize their organization’s approach to AI adoption (Source: Globalization Partners) 62% of business leaders said they felt pressure from their organizations to use AI, while only 38% found AI tools personally beneficial. Companies also began building in-house solutions to address security and compliance requirements. “A … More →
The post The AI oversight paradox: Is the investment worth the cost of watching it? appeared first on Help Net Security.
特朗普二月份买入大量波音和英伟达股票
OpenAI 推出 Daybreak,对标 Anthropic Mythos 发力 AI 网络防御;CNNVD发布关于微软多个安全漏洞的通报| 牛览
四大动因驱动密码产业竞争格局演变——《密码安全产业发展关键动因与竞争格局演变(2026版)》 研究报告正式发布!
ISC Stormcast For Friday, May 15th, 2026 https://isc.sans.edu/podcastdetail/9934, (Fri, May 15th)
PicoADSB: An Ultra-Compact All-in-One ADS-B Receiver Now on Kickstarter
美财长贝森特称中美将启动AI安全对话
OpenAI Confirms Security Breach Via TanStack npm Supply Chain Attack
Two employee devices at OpenAI were compromised in a sweeping software supply chain attack targeting TanStack npm, but the AI company confirmed no user data, production systems, or intellectual property were affected. On May 11, 2026 UTC, threat actors launched a campaign dubbed “Mini Shai-Hulud” a coordinated supply chain offensive orchestrated by the TeamPCP extortion […]
The post OpenAI Confirms Security Breach Via TanStack npm Supply Chain Attack appeared first on Cyber Security News.