Aggregator

当前以人工智能为代表的新技术的发展和应用正呈井喷之势。前沿科技的浪潮正以前所未有的力量改变社会形态。在这场“高端局”的竞赛背后，隐蔽战线的较量也日趋激烈。

半决赛技术文件主要包括五部分：半决赛考核大纲、赛制说明、评分规则、奖项设置及晋级决赛规则。

2026年3月22日在全国六大赛区（辽宁、浙江、湖北、广东、重庆和陕西）正式开赛。

A Ghanaian national pleaded guilty to his role in a massive fraud ring that stole over $100 million from victims across the United States through business email compromise attacks and romance scams. [...]

CTF密码学总卡关？30小时破局实战来了！

AI自主权成双刃剑，Shell工具竟成攻击跳板

看雪论坛作者ID：BornChu

关注高级攻防对抗技术热点，研究对手技术进行高级威胁模拟，研判攻击安全发展方向。

已知矩形ABCD，E在DC延长线上，AC、BE交于F。BD=a、DC=b、CE=c，求△BCF面积。

Cyolo has released Cyolo PRO (Privileged Remote Operations) v7.0, a major update that expands OT-first secure remote access and strengthens protection for critical infrastructure and industrial environments without disrupting operations. Secure remote access (SRA) tools focus primarily on managing access. Cyolo has always delivered a more holistic approach, designed to govern all scopes of access and provide proactive protection across the CPS environment. Cyolo PRO 7.0 introduces new capabilities, including AI-powered session intelligence, OT asset … More →

The post Cyolo PRO 7.0 expands OT-first secure remote access with AI session intelligence appeared first on Help Net Security.

The ability to continue operating safely in an unsafe environment where competitors cannot is a competitive advantage that is rarely measured or discussed

显著降低误报，让告警更贴近真实可利用链路！

Zero-trust collapses when email whitelists create permanent exceptions. Here's why this hidden risk undermines modern security investments.

The post The Zero-Trust Paradox: Why Email Whitelists are Undoing Millions in Security Investment appeared first on Security Boulevard.

Cursor Automations, the always-on agent platform from Cursor, is expanding with a new generation of autonomous systems that streamline code review, incident response, and other engineering workflows. The platform runs AI agents on schedules or in response to development events. These triggers include merged pull requests on GitHub, newly created issues in Linear, messages sent in Slack, incidents reported through PagerDuty, and custom webhook events. Cursor aims to help engineering teams keep up with the … More →

The post Cursor Automations turns code review and ops into background tasks appeared first on Help Net Security.

Cisco выпустила исправления для пяти уязвимостей в сетевых продуктах.

2026 年 2 月 17 日，有人在 npm 上发布了 [email protected]，它与之前的版本基本上相同，唯一的区别是在 package.json 中加入了一行代码："postinstall": "npm install -g openclaw@latest"。在之后的八小时内，所有安装或更新 Cline 的开发者都在未经许可的情况下，在计算机上全局安装了 OpenClaw——拥有完整系统访问权限的 AI 智能体。在该软件包被撤回之前，其下载量大约 4000 次。有意思的不是有效载荷，而是攻击者最初是如何获取到 npm 令牌的：将一个提示信息注入到 GitHub 问题标题中，AI 分类机器人读取了提示信息，将其解释为指令并执行。

A campaign by Iran-linked group Dust Specter is targeting Iraqi officials with phishing emails delivering new malware families. Zscaler ThreatLabz researchers linked the Iran-nexus group Dust Specter to a campaign targeting Iraqi government officials. Threat actors impersonated the country’s Ministry of Foreign Affairs in phishing messages that delivered previously unseen malware, including SPLITDROP, TWINTASK, TWINTALK, […]

【火绒安全周报】沃尔沃员工资料外泄/Reddit因儿童隐私违规处理被罚