Aggregator

Remote Sunrise Helper for Windows 2026.14 - Unauthenticated File/Directory Listing

Windows Snipping Tool - NTLMv2 Hash Hijack

美团 LongCat 团队正式发布 General 365。我们发现，在对 26 款主流模型的实测中，目前地表最强的 Gemini 3 Pro 准确率仅为 62.8%，而绝大多数模型甚至没能摸到 60 分的及格线。

2026年05月14日（現地時間）、米国CISAがCISA ICS Advisory / ICS Medical Advisoryを公表しました。

大模型在 AIME、IMO 等高难度竞赛中拿奖拿到手，仿佛已经进化出了“人类最强大脑”。但与此同时，如果你问大模型：“离洗车店只有 50 米，我是开车去还是走路去？”。这些号称满分推理的模型，依然会一

短短一个月内，他连续遭遇了两次精心策划的虚假面试攻击，攻击者伪装成招聘方...

The TeamPCP hacker group is threatening to leak source code from the Mistral AI project unless a buyer is found for the data. [...]

地理空间情报，英文称为Geospatial Intelligence，简称GEOINT，是情报学科体系中一个至关重要的分支。

This daily article is intended to make it easier for those who want to stay updated with my regular Dark Web Informer and X/Twitter posts.

Will Regulators Make the May Deadline, and What Changes Will Make the Cut?
Federal regulators are scheduled to issue a rule this month finalizing a proposed massive overhaul of the 23-year-old HIPAA Security Rule. Will the Department of Health and Human Services make the deadline, and what should HIPAA regulated organization expect?

Economist Enterprise Research Reveals the Gap Between AI Optimism and Real Returns
Four out of five executives say their AI programs are beating expectations, but fewer than half track whether that's true. New Economist Enterprise research exposes where enterprise AI efforts stall and what separates firms generating real returns from those still in pilots.

Also, YellowKey Bypasses BitLocker, Škoda Breach, Kingdom Market Operator Jailed
This week, U.S. lawmakers urged action on AI, a BitLocker exploit. Škoda, Nvidia’s GeForce NOW partner and telehealth firm OpenLoop reported breaches. Patch Tuesday. A dark market operator sentenced and pro-Ukraine and Iranian-linked hacking. Nitrogen ransomware attack on Foxconn.

Akamai Says Startup LayerX's Browser Telemetry Will Strengthen Access Decisions
Akamai said its proposed $205 million acquisition of LayerX will add enterprise browser security and AI usage controls to its zero trust portfolio as enterprises grapple with generative AI data exposure, autonomous AI agents and growing demand for browser-level visibility.