Posts of last few hours

原域名已变更且将在2024年彻底废弃，请访问 https://govuln.com/news/ 查看新的RSS订阅
原域名已变更且将在2024年彻底废弃，请访问 https://govuln.com/news/ 查看新的RSS订阅
https://govuln.com/news/url/x8dB
ISMG Editors: French Supermarket Hack Weaponized Food
Also: Anthropic Warns That AI Agents Could Spread Across IoT Devices
In this week's ISMG Editors' Panel, four editors discussed the weaponization of food in a cyberattack against French supermarkets, the prospect of self-replicating artificial intelligence agents and why crypto agility matters beyond post-quantum cryptography.
https://ransomware.databreachtoday.com/ismg-editors-french-supermarket-hack-weaponized-food-a-33133
Anthropic Gives AI Safety Evaluators Insider Access
METR Researchers Gain Employee-Level Access to Assess Unreleased Models and Publish Independent Risk Findings
Anthropic, one of the labs that pushed for embedded evaluators, said in a blog post that it is giving the independent evaluator Metr "employee-like access" to its models before deployment. This level of access is close to what Metr said are best practices for its assessors to understand how highly capable models behave.
https://ransomware.databreachtoday.com/anthropic-gives-ai-safety-evaluators-insider-access-a-33134
Prove Claims Former Employees Fueled KYXStart Infringement
Delaware Complaint Targets Two Patents Covering Digital Identity Authentication
Prove has sued digital identity rival KYXStart, alleging that former senior employees helped develop competing identity verification, fraud intelligence and authentication products that infringe two Prove patents, while violating contractual restrictions and undermining its competitive position.
https://ransomware.databreachtoday.com/prove-claims-former-employees-fueled-kyxstart-infringement-a-33135
North Korean IT Workers Used Stolen US Identities to Earn $3 Million
The FBI raided 40 Texas homes over a North Korean scheme that used fake IT workers to target 70 US companies and generate $3 million. The Justice Department (DoJ) announced coordinated enforcement actions this week targeting North Korea’s long-running scheme to place fake IT workers inside American companies. Two US nationals were arrested, 14 people […]
https://securityaffairs.com/201193/intelligence/north-korean-it-workers-used-stolen-us-identities-to-earn-3-million.html
游戏逆向工程网站宣布关闭因为 AI 让反编译游戏变得非常容易
协作游戏逆向工程网站 decomp.dev 宣布将关闭，管理员称 AI 让游戏反编译变得快且易于操作，基于人工的社区协作模式实际上已经瓦解，无法再区分哪些项目是以人工为主导的，哪些是由 AI 完成的。decomp.dev 管理员 Encounter 在官网声明中表示，从历史上看，匹配反编译一直是极其困难且耗时的任务，即便是对那些有适量活跃贡献者的中等规模游戏来说，反编译要以“年”为单位计时，但 GPT-6-Astra 之类的前沿 AI 模型最近已让反编译游戏变得极其轻松：它们在遵循复杂指令、为符号或调试信息交叉检索资源，以及在获得充分指引的情况下编写自然代码方面，要强得多。显而易见，只要有合适的指导、人类输入和代码审查，AI 能以非常显著的方式加速反编译。同样显而易见的是，反编译的社区属性已经被结束了。

https://www.solidot.org/story?sid=85638
Спасибо Мизулиной за бдительность. Украинские хакеры „Черная искра“ сорвали школьное анкетирование по всей стране
На экранах учащихся появилась символика группировки, ранее заявлявшей о взломе Microolap.
https://www.securitylab.ru/news/578919.php
天文学家发现第一颗绿色恒星
天文学家可能发现了第一颗绿色恒星——名为 WD J1330+6435 的白矮星，位于地球 326 光年外。部分死亡恒星——即白矮星——在吞噬围绕其运行的行星后，可能会呈现出绿色。WD J1330+6435 一直在吸积其行星伴星上的岩石物质。这一过程使其大气中富含钙、锂和钠元素。模型表明这些元素的存在使得 WD J1330+6435 呈现绿色。WD J1330+6435 是已知首颗真正呈现绿色的恒星。研究人员称，白矮星大气中残留的钠元素吸收了光谱中的橙色部分，留下了幽灵般的绿光。

https://www.solidot.org/story?sid=85637
GNOME 面向普通用户发布 GNOME OS Preview
GNOME 项目已推出发行版项目 GNOME OS 一段时间，但它只提供基于最新代码的 Nightly 版本，主要面向开发者。现在它推出了面向普通用户的 GNOME OS Preview。GNOME OS Preview 基于 Nightly 版本，但去掉了 Nightly 特性，基于最新的 GNOME 51.1 构建。开发者表示该版本尚未经过充分的实际使用测试，可能会遇到问题，但稳定性肯定高于 Nightly 版本，对想要尝鲜的普通用户而言足够稳定，可用于日常使用。但它还需要进一步完善。

https://www.solidot.org/story?sid=85636
Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack
ConnectWise has shut down customer access to its Cloud Backup service (formerly SkyKick Cloud Backup) after hackers accessed application identities and compromised Microsoft 365 tenants. [...]
https://www.bleepingcomputer.com/news/security/hackers-breach-microsoft-365-tenants-via-connectwise-supply-chain-attack/
[2026]sub6api -前AI时代的OldSchool手艺人打造,无OpenAI降智,无Claude封号
众所周知，网上所有SUBXAPI特征都非常多,有些特征低级的可怕,一看就是不懂技术没搞过协议模拟的人用AI写的泔水，用了就是自爆卡车。SUB6API重写了这些协议，完全吻合claudecode和...
https://key08.com/index.php/2026/10/17/3365.html
Без root, эксплойтов и уязвимостей. Shizuku превращает приложение в системную оболочку
Механизм работает ровно так, как задумано, поэтому привычного патча просто не существует.
https://www.securitylab.ru/news/578868.php
Drupal patches critical RCE flaws, warns exploits may emerge soon
Drupal has patched two critical vulnerabilities that could allow attackers to execute code remotely on websites running any supported version of the content management system. [...]
https://www.bleepingcomputer.com/news/security/drupal-patches-critical-rce-flaws-warns-exploits-may-emerge-soon/
РЭБ лишает дроны управления. В США нашли способ не дать глушилкам оборвать связь
Skydio прорывается сквозь помехи и держит связь, пока враг забивает эфир.
https://www.securitylab.ru/news/578833.php
工具调用最小权限与能力降级
https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247497309&idx=1&sn=0fda6be23644c8689ee83758a770b443
Искусственный интеллект пошёл против картелей. ФАС впервые возбудила дело по наводке нейросети
ИИ заметил подозрительные торги на 676 млн
https://www.securitylab.ru/news/578867.php
小小四的日常
cby: 我想好了，等我退休了，我就做个美食家
https://mp.weixin.qq.com/s?__biz=MzUzMjQyMDE3Ng==&mid=2247490018&idx=1&sn=10e1754abec32a5f72e6d57f73d3696b
Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups

Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise to shut off application access and interrupt backup services. Jonathan Semon confirmed unauthorized sign-ins across 162 tenants as of 19:00 UTC on October 16, exposing risks associated with privileged vendor applications. ConnectWise said in its October 17 update, supplied for […]

The post Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

https://gbhackers.com/hackers-use-connectwise-skykick-credentials/
Вход только по паспорту от Microsoft: Fortnite превращает открытый Linux в закрытую клетку
Easy Anti-Cheat Linux v2 ограничит доступ к ядру, запретит опасные операции и не позволит запускать игру в произвольно изменённой системе.
https://www.securitylab.ru/news/578866.php
MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon
Cybersecurity researchers have discovered a malicious npm package that's part of a recently disclosed software supply chain attack campaign dubbed MALFEX. The package, named "imgdecode," was uploaded to the package registry on September 30, 2026, by a user named "malfexteste8." It has been downloaded 979 times as of writing and is still available on npm as of writing. The latest version of
https://thehackernews.com/2026/10/malfex-npm-package-imgdecode-hides.html

Managed ad