Aggregator

AI 20分钟找出Firefox漏洞，但开发攻击代码仍力不从心

看雪论坛作者ID：南行

Web applications are the backbone of modern businesses. They serve as sales platforms, customer interfaces, and process engines. There is no question that this infrastructure must be protected.   But in an IT landscape that is rapidly evolving toward APIs and microservices, one thing remains constant: standing still means risk. In light of this, is the classic protection approach still sufficient?  […]

The post WAF is yesterday’s news: Why WAAP is the answer to today’s threats  appeared first on Link11.

Augur has announced a $15 million seed round led by Plural, with participation from First Kind, SNR, Flix, and Tiny VC. The funding will support the deployment of Augur’s technology as governments, operators, and venue owners across Europe face rising security threats to vulnerable public spaces and critical national infrastructure. The changing threat landscape The world is facing ever more complex and destabilising security threats, underlined by the outbreak of conflict in Iran, which has … More →

The post Augur lands $15 million funding to strengthen critical infrastructure security appeared first on Help Net Security.

Исследуем механику работы профессиональной фабрики иллюзий.

游戏虽好别乱下！这类游戏盒子暗藏DDoS病毒

AI智能体全民化背后，高危漏洞与自主失控风险暗藏，警惕数据泄露与系统被控隐患。

速更换

强烈建议开发者审查composer.json文件，并立即移除任何由nhattuanbl撰写的软件包。

OpenAI introduced Codex Security⁠, an AI agent that reviews codebases to find, verify, and help fix software vulnerabilities. The launch comes a few weeks after rival Anthropic unveiled its Claude Code Security tool. Codex Security (Source: OpenAI) The feature is available in research preview via Codex Web for ChatGPT Pro, Enterprise, Business, and Edu customers, with free access for the next month. Previously known as Aardvark, Codex Security launched last year in a private beta … More →

The post OpenAI joins the race in AI-assisted code security appeared first on Help Net Security.

从“筑墙”到“狩猎”：特朗普政府重塑美国网络空间战略

行业大模型可能是提示词注入攻击的风险重灾区

Currently trending CVE - Hype Score: 3 - A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16.6 and iPadOS 16.6, Safari 16.6. Processing maliciously crafted web content may lead to memory corruption.

Currently trending CVE - Hype Score: 3 - This issue was addressed with improved checks. This issue is fixed in macOS Tahoe 26.2, macOS Sonoma 14.8.3, macOS Sequoia 15.7.3, iOS 18.7.3 and iPadOS 18.7.3. An app may be able to access sensitive user data.

Почему модернизация не спасла владельца Cocorico от убытков?

上周关注度较高的产品安全漏洞(20260302-20260308)

国家信息安全漏洞共享平台（以下简称CNVD）本周共收集、整理信息安全漏洞314个，其中高危漏洞168个、中危漏洞128个、低危漏洞18个。

本周五见！