Aggregator

New XWorm 7.1 and Remcos RAT campaigns abuse trusted Windows tools to evade detection. The attacks exploit a WinRAR flaw and use process hollowing to spy on victims.

A vulnerability categorized as problematic has been discovered in Tinycontrol Lan Kontroler. The impacted element is an unknown function. Executing a manipulation can lead to direct request. This vulnerability is handled as CVE-2025-15587. The attack can only be done within the local network. There is not any exploit available. It is advisable to upgrade the affected component.

一年一度的两会，是观察国家政策走向的重要窗口。2026年政府工作报告已经新鲜出炉，其中关于网络安全的表述，字字千钧。今天，我们就来深度拆解这份报告背后的安全信号。本次报告明确提出：“健全数据要素基础制度，强化数据安全与个人信息保护，完...

一年一度的两会，是观察国家政策走向的重要窗口。2026年政府工作报告已经新鲜出炉，其中关于网络安全的表述，字字千钧。今天，我们就来深度拆解这份报告背后的安全信号。本次报告明确提出：“健全数据要素基础制度，强化数据安全与个人信息保护，完...

一年一度的两会，是观察国家政策走向的重要窗口。2026年政府工作报告已经新鲜出炉，其中关于网络安全的表述，字字千钧。今天，我们就来深度拆解这份报告背后的安全信号。本次报告明确提出：“健全数据要素基础制度，强化数据安全与个人信息保护，完...

16 марта в Кибердоме обсудят безопасность ИИ и защиту от дипфейков.

A newly identified backdoor called A0Backdoor has emerged as part of a calculated social-engineering campaign that abuses Microsoft Teams and the Windows remote assistance tool Quick Assist. The threat group is tracked under aliases including Blitz Brigantine, Storm-1811, and STAC5777, and holds ties to the Black Basta ransomware network. Active since at least August 2025 […]

The post Attackers Abuse Microsoft Teams and Quick Assist to Drop Stealthy A0Backdoor appeared first on Cyber Security News.

From March 5 to March 7, the ANY.RUN team attended RootedCON 2026 in Madrid and showcase some of our latest capabilities developed for modern SOC environments at the conference expo.  The event provided a great opportunity to meet our existing clients and connect with security teams exploring advanced threat detection solutions.  Meeting the Community and Partners  RootedCON is one of the largest cybersecurity conferences in Europe, bringing together thousands of security researchers, SOC […]

The post ANY.RUN at RootedCON 2026: Meeting Security Teams and Showcasing New Capabilities  appeared first on ANY.RUN's Cybersecurity Blog.

Attackers can exploit insecure defaults and prompt injection vulnerabilities to turn normal agent behavior into a silent data-exfiltration pipeline. The core issue is not just confusing the AI model; it is manipulating the agent to steal sensitive information without requiring any user interaction. The most alarming demonstration comes from security firm PromptArmor. They revealed how […]

The post OpenClaw AI Agents Leaking Sensitive Data in Indirect Prompt Injection Attacks appeared first on Cyber Security News.

Microsoft Edge version 146 (Stable) became available on March 13, 2026, bringing updates to tracking protection, IP privacy, and enterprise network security policies. One change affects tracking prevention in InPrivate browsing. InPrivate windows use the same tracking prevention level configured for standard browsing sessions. The separate option that previously allowed a different tracking setting for private windows has been removed. The release expands Private IP, part of the Edge Secure Network capability. The feature routes … More →

The post Microsoft Edge 146 adds IP privacy and local network access controls appeared first on Help Net Security.

本次发布会不仅展示了慢雾的最新技术成果，更为行业合规发展注入了新的动力。

Android 17 will block non-accessibility apps from using the Accessibility API under Advanced Protection Mode to reduce malware abuse. Android 17 introduces a new security feature in Advanced Protection Mode (AAPM) that blocks apps without accessibility functions from accessing the Accessibility API. The change, first reported by Android Authority and included in Android 17 Beta […]

Разработчики Linux готовят исправления для критической ошибки в системе контроля доступа.

An issue with the Companies House website has put the personal and corporate information of millions at risk

Kyiv, Ukraine, 16th March 2026, CyberNewswire

Agent 正在发起一场针对旧平台、旧生产方式和旧商业模式的革命。这场革命不会平滑发生，它会遭遇旧势力反扑，但也可能因为 AI 的加速进化，比历史上的革命来得更快。

HumanBug15 年实战经验，手把手教落地

看雪论坛作者ID：AO031

付费操控 AI 答案，虚假信息误导消费决策

AI Agent 不只是极客的折腾工具，同时也是人人都能