Posts of last 24 hours

8月28日北京见：XCon2026，9场AI安全硬核实战，等你落座，门票开抢！
https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458618874&idx=2&sn=63f8c0533f1b004781182a9746d59f9a
2026 KCTF | 第七题《戌时·暗能潜流》设计思路及解析
『SRookie』战队用时1小时8分18秒拿下“一血”
https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458618874&idx=1&sn=354a1884e7d6d70cc0abb8ee54c88e8a
关于 VSRC 例行维护的通知
尊敬的白帽子师傅们，感谢大家一直以来对唯品会安全应急响应中心（VSRC）的支持与贡献！
https://mp.weixin.qq.com/s?__biz=MzI5ODE0ODA5MQ==&mid=2652281765&idx=1&sn=c961e1014f7385ebd8683615102ab0b5
Постквантовая криптография, UUID из коробки и поиск «зависших» фоновых процессов — что нового в Go 1.27
Go 1.27 получил одно из крупнейших обновлений языка за последние годы.
https://www.securitylab.ru/news/576293.php
安全热点周报：黑客利用 macOS 屏幕共享漏洞部署门罗币挖矿程序
https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247507178&idx=1&sn=11d97e33c51432a1d87745724fb2c4e8
AI 蠕虫已现形：AI 基建成为攻击者的循环攻击温床
AI工具漏洞已被规模化利用，攻击者批量窃取模型密钥、植入后门并持续扩散，“AI蠕虫”正成为现实威胁。
https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247512062&idx=1&sn=4b18cf041e6f0fa7f68cdc87f745adc3
【0821】重保演习每周情报汇总
攻防演练期间，本汇总每周更新当周鲜活情报和热点漏洞，欢迎收藏与关注！
https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247488359&idx=1&sn=01249c3c0d9d86a08ed68eb9938850cc
CVE-2026-60165 | Oracle Cost Management 16 Enterprise Command Center improper authorization
A vulnerability classified as problematic has been found in Oracle Cost Management 16. Affected by this vulnerability is an unknown functionality of the component Enterprise Command Center. This manipulation causes improper authorization. This vulnerability is registered as CVE-2026-60165. Remote exploitation of the attack is possible. No exploit is available. It is recommended to upgrade the affected component.
https://vuldb.com/vuln/381206
CVE-2015-2596 | Oracle Java SE 7u80 Hotspot (RHSA-2015:1242 / Nessus ID 84824)
A vulnerability was found in Oracle Java SE 7u80 and classified as problematic. This affects an unknown part of the component Hotspot. The manipulation results in an unknown weakness. This vulnerability is cataloged as CVE-2015-2596. The attack may be launched remotely. There is no exploit available. It is suggested to upgrade the affected component.
https://vuldb.com/vuln/76585
CVE-2015-2613 | Oracle Java SE 7u80/8u45 JCE denial of service (USN-2696-1 / Nessus ID 85001)
A vulnerability was found in Oracle Java SE 7u80/8u45. It has been declared as problematic. The impacted element is an unknown function of the component JCE. Executing a manipulation can lead to denial of service. This vulnerability is registered as CVE-2015-2613. It is possible to launch the attack remotely. No exploit is available. It is recommended to upgrade the affected component.
https://vuldb.com/vuln/76601

Managed ad