Aggregator

给你的虾装上扣子罗盘Trace，从此告别黑箱操作，让每一步都看得见！

HawkEye Conflict Intelligence: Iranian Threat Actor Advisories — March 2026 As the regional conflict continues, Iranian state-sponsored groups and aligned […]

The post HawkEye Conflict Intelligence: Active Threat Advisories appeared first on HawkEye.

ВВП всегда была главной уязвимостью военной авиации. Так почему бы не избавиться от неё?

关于防范OpenClaw（“龙虾”）开源智能体安全风险的“六要六不要”建议

Rust has been gaining attention in recent years as a language expected to replace C and C++, due to its memory safety and high performance. While Rust continues to be adopted as a programming language, malware developed using Rust (hereinafter...

网络犯罪组织已开始尝试使用智能体 AI，实现任务自主执行并根据结果动态调整策略。

我们从规划、经济、技术、法治四个维度，为您解析今年两会释放的关键信号。

在国家互联网应急中心（CNCERT）发布关于 OpenClaw 安全应用的风险提示的同时，银行和国企等收到通知要求不得在办公设备上安装 OpenClaw。CNCERT 的安全通知称，为实现“自主执行任务”的能力，OpenClaw 被授予了较高的系统权限，包括访问本地文件系统、读取环境变量、调用外部服务 API 以及安装扩展功能等。然而由于其默认的安全配置极为脆弱，攻击者一旦发现突破口，便能轻易获取系统的完全控制权。OpenClaw 的安全风险包括：提示词注入、错误删除重要数据、功能插件（skills）投毒以及安全漏洞等。

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a critical security flaw impacting n8n to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation. The vulnerability, tracked as CVE-2025-68613 (CVSS score: 9.9), concerns a case of expression injection that leads to remote code execution. The security shortcoming was patched

AI 正从数字世界走向物理世界。

AI 时代，最贵的护城河不是算法，而是安全。

Как одна ошибка в настройке устройства приводит к потере контроля над всеми данными.

A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'DongHyeon Hwang (kind_killerwhale)' was reported to the affected vendor on: 2026-03-12, 13 days ago. The vendor is given until 2026-07-10 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

Blocking bots isn’t enough anymore. Cloudflare’s new fraud prevention capabilities — now available in Early Access — help stop account abuse before it starts.

A vulnerability has been found in Lenovo ThinkPad T14 Gen 5 BIOS, ThinkPad P14s Gen 5 BIOS, ThinkPad Z13 Gen 2 BIOS, ThinkPad Z16 Gen 2 BIOS, ThinkPad P16v Gen 1 BIOS, ThinkPad P15v Gen 3 BIOS, ThinkPad Z13 Gen 1 BIOS and ThinkPad Z16 Gen 1 BIOS up to 1.17 and classified as critical. Affected by this vulnerability is an unknown functionality. This manipulation causes improper initialization. This vulnerability is tracked as CVE-2026-0940. The attack is restricted to local execution. No exploit exists.

A vulnerability, which was classified as critical, was found in Lenovo PC Manager up to 5.1.140.9262. Affected is an unknown function. The manipulation results in improper privilege management. This vulnerability is identified as CVE-2026-2640. The attack is only possible with local access. There is not any exploit available. You should upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Asseco SEE Live 2.0. This impacts an unknown function of the component SMS/Fax. The manipulation leads to improper access controls. This vulnerability is referenced as CVE-2025-66956. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability classified as problematic was found in OpenEMR up to 8.0.0.1. This affects an unknown function. Executing a manipulation can lead to cross site scripting. The identification of this vulnerability is CVE-2026-32118. The attack may be launched remotely. There is no exploit available. Upgrading the affected component is advised.

A vulnerability classified as problematic has been found in oslabs-beta ThermaKube. The impacted element is an unknown function. Performing a manipulation results in use of hard-coded password. This vulnerability was named CVE-2025-70041. The attack may be initiated remotely. There is no available exploit.