Posts of last few hours
Please support the site operations by clicking ads.
Name: HKCERT CTF 2026 (Qualifying Round) (an HKCERT CTF event.)
Date: Nov. 6, 2026, 10 a.m. — 07 Nov. 2026, 10:00 UTC [add to calendar]
Format: Jeopardy
On-line
Offical URL: https://ctf.hkcert.org/
Rating weight: 10.31
Event organizers: Black Bauhinia HKCERT
Date: Nov. 6, 2026, 10 a.m. — 07 Nov. 2026, 10:00 UTC [add to calendar]
Format: Jeopardy
On-line
Offical URL: https://ctf.hkcert.org/
Rating weight: 10.31
Event organizers: Black Bauhinia HKCERT
https://ctftime.org/event/3418
Name: SpookyCTF 2026 (an SpookyCTF event.)
Date: Nov. 6, 2026, 5 p.m. — 07 Nov. 2026, 17:00 UTC [add to calendar]
Format: Jeopardy
On-line
Offical URL: https://spooky.ctfd.io/
Rating weight: 0
Event organizers: NICC
Date: Nov. 6, 2026, 5 p.m. — 07 Nov. 2026, 17:00 UTC [add to calendar]
Format: Jeopardy
On-line
Offical URL: https://spooky.ctfd.io/
Rating weight: 0
Event organizers: NICC
https://ctftime.org/event/3339
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: The first ten lines of a command policy for AI coding agents In this Help Net Security interview, Vinay Thakker, CTO of KloudStax, explains how to set identity, credentials, and network limits for AI agents. He argues that agents should run under their own identity, with the person’s identity attached when acting on someone’s behalf. Google disrupts XCPE botnet, bans … More →
The post Week in review: Refrigeration cyberattacks hit European retailers again, Patch Tuesday forecast appeared first on Help Net Security.
https://www.helpnetsecurity.com/2026/11/08/week-in-review-refrigeration-cyberattacks-hit-european-retailers-again-patch-tuesday-forecast/
原域名已变更且将在2024年彻底废弃，请访问 https://govuln.com/news/ 查看新的RSS订阅
https://govuln.com/news/url/x8dB
特斯拉将增加 Cybertruck 生产班次；Meta将Muse Wonder专用AI模型面向所有用户开放；Adobe 向初创企业抛出橄榄枝：免费使用 Firefly 和 Acrobat 等软件，最长 1 年
https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653116204&idx=1&sn=e4bed63274b937ce9ebc94df50c39b28
Hunt.io traced ARTEX servers and AI-powered hacking tools used in breaches affecting seven South Korean financial institutions. Between late September and early October 2026, seven South Korean financial institutions had data breached through internet-facing systems. About 66,000 to 67,000 people and around 2,200 corporations were affected, and personal, employment, income and loan data was exposed. […]
https://securityaffairs.com/202607/ai/inside-artex-ai-hacking-tools-exposed-servers-and-south-korean-bank-breaches.html
Rethinking modern insider risk and telling malice from mistakes
https://ransomware.databreachtoday.com/blogs/when-trust-becomes-attack-vector-p-4239
https://ransomware.databreachtoday.com/webinars/live-webinar-2027-cyber-resilience-predictions-ciso-panel-on-whats-next-w-7481
Community Commitments Leave Questions About Future AI Compute Capacity
OpenAI is promising to cover power costs and give communities more say over data center construction after an election backlash. The commitments apply to campuses it owns and operates, leaving questions about partner-built capacity and the pace of enterprise AI expansion.
OpenAI is promising to cover power costs and give communities more say over data center construction after an election backlash. The commitments apply to campuses it owns and operates, leaving questions about partner-built capacity and the pace of enterprise AI expansion.
https://ransomware.databreachtoday.com/openai-hopes-to-ease-backlash-against-ai-data-centers-a-33327
Potential $1.5 Trillion Valuation Raises Stakes for Frontier Model Makers and AI Supply Chain
The Anthropic IPO represents the first true test of the longevity and financial viability of AI as a sector, and it may affect how other companies within the AI supply chain may or may not benefit from the monster-sized investment Anthropic and other capital-intensive model makers demand.
The Anthropic IPO represents the first true test of the longevity and financial viability of AI as a sector, and it may affect how other companies within the AI supply chain may or may not benefit from the monster-sized investment Anthropic and other capital-intensive model makers demand.
https://ransomware.databreachtoday.com/anthropic-ipo-to-test-ai-industrys-financial-viability-a-33328
Botched Network Migration Allowed Unauthorized Access to Internal Customer Archive
DigiCert exposed customer data, including passports and driver's licenses, after a botched network migration opened an internal archive to unauthorized access. The breach went undetected for over a year, exposing security and monitoring failures.
DigiCert exposed customer data, including passports and driver's licenses, after a botched network migration opened an internal archive to unauthorized access. The breach went undetected for over a year, exposing security and monitoring failures.
https://ransomware.databreachtoday.com/digicert-data-breach-exposes-customer-identity-documents-a-33329
A Look at How Efforts to Get Competing Suitors to Pursue Varonis Came Up Empty
The largest security acquisition of 2026 started with initial outreach 20 months ago and included extensive, unsuccessful efforts to get counteroffers from other tech and private equity firms. Thoma Bravo Partner Chip Virnig first requested a meeting with Varonis CEO Yaki Faitelson in March 2025.
The largest security acquisition of 2026 started with initial outreach 20 months ago and included extensive, unsuccessful efforts to get counteroffers from other tech and private equity firms. Thoma Bravo Partner Chip Virnig first requested a meeting with Varonis CEO Yaki Faitelson in March 2025.
https://ransomware.databreachtoday.com/how-63b-proofpoint-varonis-acquisition-came-together-a-33330
Matrix精选 2026年11月01日 8 分钟阅读 8 分钟阅读Matrix 首页推荐Matrix 是少数派的写作社区，我们主张分享真实的产品体验，有实用价值
https://buaq.net/go-453451.html
Software vendors can boost revenue by tracking customer usage across products, while AI accelerates pricing and consumption decisions. It is hard to find any software vendor that sells just one product. Portfolios have expanded from modules to editions, cloud services, add-ons, and now AI capabilities. A lot can be achieved through an expanded portfolio. IDC […]
https://securityaffairs.com/202603/ai/one-product-isnt-the-problem-monetizing-an-ai-portfolio-without-confusing-your-customers.html
Облачные агенты Cursor создают код, разворачивают PostgreSQL, подключают авторизацию и готовят приложение к публикации.
https://www.securitylab.ru/news/579810.php
Девять лет жалоб, а фирменный браузер Apple всё ещё путает срок действия карт.
https://www.securitylab.ru/news/579786.php
https://buaq.net/go-453449.html
ESA Hera 探测器拍下了 Didymos 双小行星系统的首张近距离照片。这个系统由两颗小行星组成，直径 780 米的 Didymos 是主星，直径 151 米的 Dimorphos 则绕着它运行。2022 年 9 月 26 日，NASA DART 探测器直接撞上较小的 Dimorphos，再测量它绕行主星 Didymos 的时间改变了多少。为了进一步了解这次撞击的影响，Hera 于 2024 年 10 月 7 日发射，历经两年飞行抵达这对小行星附近。它将近距离调查撞击如何改变小行星的轨道与地表，评估这种方法将来能否用来使威胁地球的小行星偏离原有轨道。Hera 用单色小行星取景相机从 60 公里外拍下照片。较小的 Dimorphos 大部分隐没在阴影中，主星 Didymos 则清晰可见。赫拉号拍到的是主星的另一面，地貌与 DART 相机在撞击前不久拍到的那一面明显不同。这一面仍可见先前观测到的赤道隆脊，其余区域则有多块巨石、数个撞击坑，以及疑似沟槽或隆脊的地形。估计已有大量撞击喷出物从较小的 Dimorphos 飞越约 1 公里，抵达主星 Didymos，部分地表特征可能因此形成。Hera 接下来将进一步观察两个天体，有系统地绘制所辨识出的各项变化，并厘清这些地貌是否与喷出物有关。
https://www.solidot.org/story?sid=85825
FAA 计划到到 2028 年底前更换全美逾 400 个空管设施使用的软盘。新系统 Enterprise Information Display System 将取代可上溯至 1980 年代的旧系统。逾 25 年前软盘就基本停止使用，2011 年起不再大规模生产。去年美国国会批准了 125 亿美元资金用于更新陈旧的空管系统。FAA 目前还面临诸多技术难题，交通部长 Sean Duffy 正寻求额外 30 亿美元的资金。FAA 局长 Bryan Bedford 表示：“我们正摒弃过时的手动流程，用一套现代化系统取代曾依赖软盘的技术。新系统使管制员能即时共享关键的飞行警报、空域限制计划以及飞行员报告。”FAA 还在使用康柏（Compaq）计算机，此类计算机所需的零部件更换是靠 eBay 购买的。
https://www.solidot.org/story?sid=85824
Latest Blog Posts
- 1 week 2 days ago
- 1 week 2 days ago
- 1 week 2 days ago
- 1 week 2 days ago
- 1 week 2 days ago
- 1 week 2 days ago
- 1 week 2 days ago
- 1 week 2 days ago
- 1 week 2 days ago
- 1 week 2 days ago