Posts of last few hours

Хакеры проникли в украинскую компанию и выждали два месяца. Затем началось уничтожение данных
Злоумышленники спрятали канал связи там, где обнаружить управляющий сервер особенно сложно.
https://www.securitylab.ru/news/579150.php
Мозг, ИИ и нейроинтерфейсы в одном дипломе. 7 вузов запускают общую магистратуру будущего
Набор планируют открыть уже в январе 2027 года.
https://www.securitylab.ru/news/579148.php
Паника в штабах НАТО: союзники США панически боятся американского софта
Даже официальные гарантии разработчика не смогли развеять главные опасения.
https://www.securitylab.ru/news/579164.php
Физики впервые построили квантовый циклотрон для одной частицы антиматерии
Один позитрон против целой установки.
https://www.securitylab.ru/news/579145.php
Google закрыл 353 дыры в Chrome за один раз. А заодно перестал доверять половине интернета
Теперь даже привычный переход по ссылке может закончиться неожиданным предупреждением.
https://www.securitylab.ru/news/579153.php
原域名已变更且将在2024年彻底废弃，请访问 https://govuln.com/news/ 查看新的RSS订阅
原域名已变更且将在2024年彻底废弃，请访问 https://govuln.com/news/ 查看新的RSS订阅
https://govuln.com/news/url/x8dB
Trust Is Not What It Seems — And Fraudsters Are Counting on It
Threat actors don't need to rely on malware to breach organizations anymore. They're simply calling help desks and politely asking for access, with a little help from artificial intelligence.
https://www.darkreading.com/cyber-risk/trust-is-not-what-it-seems-and-fraudsters-are-counting-on-it
Exposed to PHP2Shell? Cyber Experts Weigh in With Advice
Fixing the critical PHP flaws is not as simple as clicking "Update." Here's how to assess your risk, and what you can do to protect yourself.
https://www.darkreading.com/application-security/exposed-php2shell-cyber-experts-advice
Security | PHP2Shell：内存耗尽之后，服务器怎么就被拿下了？
2026 年 10 月 21 日，#PHP 8.5.12 等版本紧急修复两个 CVSS 9.2 的未认证 RCE。本文从当晚半个互联网的停服现场说起，拆解 CVE-2026-109618 / 109619 的三条利用路径、可复用攻击原语，以及 9bie 在官方默认配置上跑通的纯 HTTP 武器化链，兼谈修复与检测。
https://miaotony.xyz/2026/10/22/Vuln_PHP2Shell/
BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing Revocations
Diplomatic organizations in Central Asia have been targeted by a sophisticated new Unified Extensible Firmware Interface (UEFI) bootkit called BlackX. The activity, which singled out diplomatic entities in Tajikistan, Uzbekistan, and Turkmenistan in early 2026, is suspected to be orchestrated by a China-linked state-sponsored hacking group known as APT41, Kaspersky said in a technical report
https://thehackernews.com/2026/10/blackx-uefi-bootkit-bypasses-secure.html
Живые мозги не вывозят темп:  США ускоряют военные удары до скорости клика мышки
Армия США ускоряет войну с помощью ИИ.
https://www.securitylab.ru/news/579125.php
Origin Range Requests: Serving large files without range-request tuning
Naive byte-range caching can waste gigabytes of origin bandwidth on small requests. We rebuilt our cache architecture in Pingora to coordinate partial fetches automatically, cutting R2 p99 latency in half.
https://blog.cloudflare.com/origin-range-requests/
Arista Networks security advisory (AV26-1080) – Update 1
https://cyber.gc.ca/en/alerts-advisories/arista-networks-security-advisory-av26-1080
PHP Warns of New Code Execution Flaw Days After PHP2Shell Patches
PHP warns of a new, unlikely code execution flaw, CVE-2026-115560, and advises disabling session upload progress until a fix is released. PHP has warned of a new code execution vulnerability, tracked as CVE-2026-115560, just two days after releasing emergency patches for the critical PHP2Shell flaws. The vulnerability affects only a specific PHP configuration that PHP […]
https://securityaffairs.com/201595/security/php-warns-of-new-code-execution-flaw-days-after-php2shell-patches.html
Bringing post-quantum cryptography to geographically fenced key management
Cloudflare's new post-quantum GeoKey Manager protects geographically fenced decryption keys from harvest now, decrypt later attacks. Learn how we redesigned our cryptography stack to support strict data sovereignty in a post-quantum world.
https://blog.cloudflare.com/post-quantum-geo-key-manager/
The cyber threat to aviation
https://cyber.gc.ca/en/guidance/cyber-threat-aviation
CREST CTF 2.0
Name: CREST CTF 2.0 (an CREST CTF event.)
Date: Oct. 23, 2026, 5:30 a.m. — 23 Oct. 2026, 11:30 UTC  [add to calendar]
Format: Jeopardy
On-line
Offical URL: https://crest.ctf7.com/
Rating weight: 0
Event organizers: CREST
https://ctftime.org/event/3477
Один приказ, 100 тысяч действий. ИИ-агента спустили с поводка заражать серверы и ставить майнеры
Скайнет пришёл не за людьми, а за серверами. И платить за него будут жертвы.
https://www.securitylab.ru/news/579132.php
Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws
Ruby has released versions 4.0.9, 3.4.12, and 3.3.13 to fix three bugs in Onigmo, the regular expression engine built into the language. The bugs lie behind four critical security flaws that GitLab patched over the past month. GitLab found that a specially crafted pattern could corrupt memory while Ruby compiles it, potentially leading to code execution on its own servers. Ruby says any
https://thehackernews.com/2026/10/ruby-fixes-three-regex-engine-bugs.html
Exposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute Intrusions
Cybersecurity researchers have discovered an artificial intelligence (AI)-driven intrusion ecosystem run by affiliates of the INC and The Gentlemen ransomware groups. Central to the operation is an "Autonomous Red Team Kill Chain Framework" referred to as Phantom. The threat actor is assessed to be Russian-speaking and functions both as an intrusion and data-extortion operator, as well as an
https://thehackernews.com/2026/10/exposed-infrastructure-reveals-how.html

Managed ad