Aggregator

科恩自研二进制安全智能分析平台—BinaryAI带来重要功能更新：发布全新代码匹配模型BAI-2.0、准确率提升、数据集拓展及用户体验优化。体验地址：https://www.binaryai.net

科恩实验室自研二进制安全智能分析平台- BinaryAI技术分享：全新功能“二进制比对”的设计与实现。本文介绍了BinaryAI如何在大模型 BAI-2.0基础上叠加启发式算法，以函数粒度的语义匹配提高了复杂场景下二进制比对准确率及召回率。
体验地址：https://www.binaryai.cn

Новое расследование серии атак от Positive Technologies.

落霞孤鹜lxgw是「霞鹜」系列开源字体开发者，在《装了啥》栏目中分享了常用软硬件及字体改造创作经历。

A vulnerability was found in Phoenix Contact CHARX SEC-3000, CHARX SEC-3050, CHARX SEC-3100 and CHARX SEC-3150 up to 1.6.2. It has been declared as very critical. Affected is an unknown function of the component Firmware Update Handler. The manipulation results in insecure default initialization of resource. This vulnerability is known as CVE-2024-6788. It is possible to launch the attack remotely. No exploit is available. It is recommended to upgrade the affected component.

CVE-2025-9132漏洞分析，Project Zero的BigSleep发现的第一个V8漏洞

Currently trending CVE - Hype Score: 1 - The Java OpenWire protocol marshaller is vulnerable to Remote Code Execution. This vulnerability may allow a remote attacker with network access to either a Java-based OpenWire broker or client to run arbitrary shell commands by manipulating serialized class types in the ...

Currently trending CVE - Hype Score: 1 - Out of bounds write in V8 in Google Chrome prior to 139.0.7258.138 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Currently trending CVE - Hype Score: 1 - Improper Input Validation vulnerability in N-able N-central allows OS Command Injection.This issue affects N-central: before 2025.3.1.

Currently trending CVE - Hype Score: 1 - Deserialization of Untrusted Data vulnerability in N-able N-central allows Local Execution of Code.This issue affects N-central: before 2025.3.1.

Полный обзор современных мошеннических методик от компании F6.

Pentesting remains one of the most effective ways to identify real-world security weaknesses before adversaries do. But as the threat landscape has evolved, the way we deliver pentest results hasn't kept pace. Most organizations still rely on traditional reporting methods—static PDFs, emailed documents, and spreadsheet-based tracking. The problem? These outdated workflows introduce delays,

Cybersecurity researchers are calling attention to malicious activity orchestrated by a China-nexus cyber espionage group known as Murky Panda that involves abusing trusted relationships in the cloud to breach enterprise networks. "The adversary has also shown considerable ability to quickly weaponize N-day and zero-day vulnerabilities and frequently achieves initial access to their targets by

文章揭示了三个与中国相关的网络间谍组织——Murky Panda、Genesis Panda和Glacial Panda——利用云服务中的零日漏洞进行攻击。这些组织通过入侵企业网络、滥用可信关系及横向移动技术获取情报。

INTERPOL on Friday announced that authorities from 18 countries across Africa have arrested 1,209 cybercriminals who targeted 88,000 victims. "The crackdown recovered $97.4 million and dismantled 11,432 malicious infrastructures, underscoring the global reach of cybercrime and the urgent need for cross-border cooperation," the agency said. The effort is the second phase of an ongoing law

国际刑警组织协调多国执法部门，在非洲18国逮捕1209名网络犯罪分子，涉及8.8万受害者。行动捣毁1.1万个恶意基础设施，追回9740万美元资金。重点打击勒索软件、网络诈骗及商业电邮入侵等犯罪行为。

Think of the Web as a digital territory with its own social contract. In 2014, Tim Berners-Lee called for a “Magna Carta for the Web” to restore the balance of power between individuals and institutions. This mirrors the original charter’s purpose: ensuring that those who occupy a territory have a meaningful stake in its governance.

Web 3.0—the distributed, decentralized Web of tomorrow—is finally poised to change the Internet’s dynamic by returning ownership to data creators. This will change many things about what’s often described as the “CIA triad” of ...

The post AI Agents Need Data Integrity appeared first on Security Boulevard.

文章探讨了Web 3.0时代下数据所有权的回归及其对数字安全的影响，强调了数据完整性的核心作用，并通过实例分析了其在AI系统中的重要性及构建方法。