Aggregator

A vulnerability marked as problematic has been reported in ZTE F50 1.0.0B07. This vulnerability affects unknown code of the component Web Module Interface. The manipulation leads to information disclosure. This vulnerability was named CVE-2025-26709. Access to the local network is required for this attack. There is no exploit available.

悬镜在NPM官方仓库中捕获1起针对JS前端框架组件 javaxscript 的投毒攻击事件，存在较大安全隐患，请速排查！

The U.S. Department of the Treasury's Office of Foreign Assets Control (OFAC) on Thursday renewed sanctions against Russian cryptocurrency exchange platform Garantex for facilitating ransomware actors and other cybercriminals by processing more than $100 million in transactions linked to illicit activities since 2019. The Treasury said it's also imposing sanctions on Garantex's successor, Grinex

Security researchers have uncovered a sophisticated new phishing campaign that exploits the Japanese hiragana character “ん” to create deceptively authentic-looking URLs that can fool even vigilant internet users. The attack, first identified by security researcher JAMESWT, targets explicitly customers of the popular travel booking platform Booking.com. The malicious technique leverages the visual similarity between the […]

The post New Clever Phishing Attack Uses Japanese Character “ん” to Mimic Forward Slash “/” appeared first on Cyber Security News.

CrowdStrike прогнозирует эру молниеносных атак и социальной инженерии, усиленной ИИ.

Агенты больше не обязаны жить в изоляции. Новый стандарт ACP от IBM — это универсальный язык общения для ИИ-агентов на любых фреймворках. REST, асинхронность, простота запуска — всё, чтобы наконец забыть об интеграционном хаосе.

本课程旨在通过系统性知识学习，培养实战化AI安全人才，为“AI+”时代关键信息基础设施安全建设提供人才保障。

不只是车联网安全

关键词恶意软件网络安全研究机构Point Wild近日发布重大威胁警告，发现一款名为"Eaglercraft

关键词网络钓鱼安全公司Malwarebytes警告，一种冒充Netflix招聘的钓鱼攻击正针对求职者，尤其是营

关键词Windows微软最新公告确认，Windows 11 23H2家用版和专业版的系统更新服务即将终止。

We used to think of privacy as a perimeter problem: about walls and locks, permissions, and policies. But in a world where artificial agents are becoming autonomous actors — interacting with data, systems, and humans without constant oversight — privacy is no longer about control. It’s about trust. And trust, by definition, is about what happens when you’re not looking. Agentic AI — AI that

印度取代中国成为世界电子制造工厂的蓝图有一个显著的特征：整座印度大厦需要中国公司提供技术架构、制造技术和运营模板。以 Dixon Technologies 为例，该公司与越来越多的中国合作伙伴合作打造印度的电子产品制造能力：龙旗科技提供设计智能，昆山丘钛科技提供摄像头模组专业知识，重庆宇海提供精密模塑部件，惠科电子（HKC）提供显示技术。这种依赖模式已成为印度电子制造业发展的组织原则。现阶段的结构中，中国公司保留了对关键知识的控制权，印度合作伙伴则提供劳动力套利和监管流程。印度与其说在构建中国制造业的替代，不如说是在建造中国制造业的最复杂子公司，由印度纳税人承担，以国家复兴为宣传口号。分析人士将这一战略称为“中国加一”。 

强势围观

好东西，要码住！

Иностранные мессенджеры стали главным каналом хищений денег.

近期，有网友发现，短视频平台上出现了大量形象光鲜的AI数字人主播，但视频未标注任何AI生成提示，一些警惕性较低的人很容易被诱导下单，成为这种新型陷阱的受害者。而这背后是一条从“起号”到“养号”、以AI技术贯穿始终的黑色产业链。

近日，国家互联网信息办公室发布《国家信息化发展报告（2024年）》，系统展现了2024年各地区、各部门积极谋划改革创新举措，凝聚政策资源合力，推动信息化发展取得的显著成果。