Posts of last few hours

12 分钟订单破万，吉利银河战舰 700，要订下新能源越野的新标准
三电机四驱和千匹马力，恰恰只是表面。
https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653114654&idx=2&sn=d1a75d1bd7c250520563ac583ad090bb
独家｜和 Nex 创始人复盘：三年出货 100 万台，收入增长 60 倍，如何成为游戏机新王？
25 年没人挤进的游戏主机市场，他们连续三年卖断货。
https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653114654&idx=1&sn=c45aa93b4473c56de43b628412b4fcee
kBxAc CTF 2026
Name: kBxAc CTF 2026 (an kBxAc CTF event.)
Date: Oct. 9, 2026, 6:30 p.m. — 10 Oct. 2026, 18:30 UTC  [add to calendar]
Format: Jeopardy
On-line
Offical URL: https://ctf.kbxac.xyz/
Rating weight: 0
Event organizers: kBxAc
https://ctftime.org/event/3456
Cryovault 2026 Quals
Name: Cryovault 2026 Quals (an ISFCR PESU CTF event.)
Date: Oct. 10, 2026, 4:30 a.m. — 11 Oct. 2026, 04:30 UTC  [add to calendar]
Format: Jeopardy
On-line
Location: Online
Offical URL: https://isfcrpesu.ctfd.io/
Rating weight: 0
Event organizers: x6e.x65.x78.x75.x73
https://ctftime.org/event/3441
Narxoz CTF
Name: Narxoz CTF (an Narxoz CTF event.)
Date: Oct. 10, 2026, 10 a.m. — 10 Oct. 2026, 18:00 UTC  [add to calendar]
Format: Hack quest
On-site
Location: Almaty, Kazakhstan
Offical URL: https://narxploit.narxoz.kz/register.html
Rating weight: 0.00
Event organizers: NarXploit
https://ctftime.org/event/3437
Следить за мыслями ИИ становится сложнее. Трое уволенных сотрудников OpenAI бьют тревогу
Внутренний конфликт вышел наружу и поставил под вопрос правила, по которым работает компания.
https://www.securitylab.ru/news/578563.php
🏴‍☠️ Dragonforce has just published a new victim : TQC S.A.
(A release of 750 GB of data, compressed into archives for convenience.) TQC Tecnología Química Comercio S. A. specializes in providing high-quality solutions for the agricultural, veterinary, and environmental health sectors, promoting sustainable agriculture. The company aims to support the development and well-being of these sectors by offering a wide range of products tailored to their needs. With a commitment to excellence, TQC seeks to be a leading provider in Peru and other markets in South America. They work closely with farmers to exceed expectations and contribute to community growth.
https://www.ransomware.live/id/VFFDIFMuQS5AZHJhZ29uZm9yY2U=
P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands
Cybersecurity researchers have disclosed details of a previously unseen variant of the DarkSword iOS exploit kit called P7 DarkSword. "Compared with the variants we usually observe, P7 reduces its on-device footprint, adds on-device keychain and crypto-wallet theft, and adds two way C2 communication with the attacker's infrastructure," iVerify said in a new report published Thursday. The name
https://thehackernews.com/2026/10/p7-darksword-ios-exploit-kit-adds.html
ИИ пишет код, Оранж Цай забирает кассу: легенда DEVCORE показал мастер-класс взлома Microsoft Exchange 
Победитель доказал, что несколько мелких просчётов опаснее одной большой дыры.
https://www.securitylab.ru/news/578555.php
The Best Protected Website Builder in 2027: Which Platform Keeps Your Site Truly Safe [Ranked & Scored]

A website builder’s biggest security feature is invisible: everything you never have to patch. Hosted platforms took the jobs that get self-managed sites hacked — core updates, TLS renewal, server hardening — and made them the vendor’s problem, which is why the real 2027 question isn’t “builder or not” but which builder’s security program deserves […]

The post The Best Protected Website Builder in 2027: Which Platform Keeps Your Site Truly Safe [Ranked & Scored] appeared first on Cyber Security News.

https://cybersecuritynews.com/best-protected-website-builder/
Ransomware Actors Exploiting Palo Alto GlobalProtect Flaw for Stealthy VPN Access

Ransomware groups are actively exploiting CVE-2026-0257, an authentication bypass affecting Palo Alto Networks PAN-OS GlobalProtect and Prisma Access. ReliaQuest reports that multiple threat groups, including Qilin and Settra, are using the flaw to create unauthorized VPN sessions and enter internal networks through trusted remote access services. The activity presents a serious detection challenge because attackers […]

The post Ransomware Actors Exploiting Palo Alto GlobalProtect Flaw for Stealthy VPN Access appeared first on Cyber Security News.

https://cybersecuritynews.com/palo-alto-globalprotect-flaw-vpn-access/
伊朗革命卫队称在霍尔木兹缴获美制无人潜航器，海峡安全态势误判或危及我原油及液化气运输通道
霍尔木兹海峡里，一艘身份尚未核实的无人潜航器，把军事博弈、能源运输和信息较量拉进了同一片水域。9月27日，伊
https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650569865&idx=2&sn=410a0af7067451578aff60993fe7b714
利雅得机场挨炸之后，特朗普一句“可能参战”，背后是一场算不过账的战争
当地时间2026年10月10日下午，利雅得哈立德国王国际机场再次遭到袭击。
https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650569865&idx=1&sn=bb9258091085c2d1ae7b460ce10d37c9
🏴‍☠️ Qilin has just published a new victim : Confipetrol
N/A
https://www.ransomware.live/id/Q29uZmlwZXRyb2xAcWlsaW4=
Scrapling — Updated!
https://buaq.net/go-447616.html
Sniffing a Bricked Glucose Monitor with Codex
https://buaq.net/go-447615.html
Третий ЦОД за четыре дня. «Яндекс» объявил аварийный режим облачной платформы
Пока компания борется с последствиями предыдущих аварий, проблемы возникли в зоне ru-central1-a.
https://www.securitylab.ru/news/578584.php
U.S. CISA adds ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND flaws to its Known Exploited Vulnerabilities catalog
U.S. CISA adds ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND flaws to
https://buaq.net/go-447619.html
Below the Waterline Stage 2 - Regulating Red Teams
https://buaq.net/go-447617.html
🏴‍☠️ Incransom has just published a new victim : hsc.mb.ca
The Health Sciences Centre in Winnipeg, one of the largest medical institutions, was targeted by us that resulted in the largest data breach among healthcare institutions. Our group chose not to completely disrupt the facility’s operations, recognizing the potentially devastating consequences that such an action could have had on patients’ lives and health. Nevertheless, Health Sciences Centre management stated that no sensitive data had been affected, despite having been informed otherwise. The data included, but was not limited to, the following information: Patient medical records: Full name, date of birth, address and phone number Hospital medical record number Diagnoses, medical history, allergies and medications Laboratory results, imaging reports Appointment dates, treatment details and physician information. Employee and healthcare professional information: Names, contact details, dates of birth and employee numbers Employment, payroll and banking information Professional credentials, work schedules and departmental assignments. Financial and insurance information: Billing records and payment histories Insurance or benefits claim information. Confidential hospital documents: Internal emails and staff communications System configurations, network diagrams and security procedures Database backups and exported spreadsheets. We would have very much preferred to avoid making this data breach public, but the management has left us with no other choice.
https://www.ransomware.live/id/aHNjLm1iLmNhQGluY3JhbnNvbQ==

Managed ad