Aggregator

Downdetector зафиксировал резкий рост жалоб на работу Telegram.

巴国分离冲突骤烈冲击中巴合作，反恐维稳成当务之急（资料编码260210539，10页，3785字）据路透社2

2023年5月，CIA在社交媒体上罕见地发布了一则用俄语写成的短片，直接向俄官员喊话：“不满现状？愿意提供情报？

996 工作制在中国饱受争议，而美国 AI 初创公司正将这一工作制视为特色。纽约 AI 初创公司 Rilla 在招聘广告中警告应聘者每周工作时间可能长达 70 小时。只有 7 个人的初创公司 Browser-Use 开发浏览器与 AI 的交互工具，它将一个共享空间作为办公以及生活的场所，更进一步的模糊了工作和生活的界限。风投 Menlo Ventures 的合伙人 Deedy Das 指出，长时间工作并不意味着员工工作效率高或有更高的生产力，这么做会疏远有家庭的员工以及富有经验的年长员工。长时间工作还会导致职业倦怠。他认为公司创始人长时间工作无可厚非，因为攸关自身利益，如果公司成功他们会变得非常富有。密歇根州立大学的研究发现，一名每周工作 70 小时的员工的产出与一名每周工作 50 小时的员工几乎相同。

以 CVE-2020-0668 为例，分析 Windows 服务因 LoadLibraryEx 调用不规范导致的 DLL 劫持漏洞。

China-linked group UNC3886 targeted Singapore ’s telecom sector in a cyber espionage campaign, Singapore’s Cyber Security Agency revealed. Cyber Security Agency of Singapore (CSA) and the Infocomm Media Development Authority (IMDA) ran Operation CYBER GUARDIAN to protect the telecom sector. Since July 2025, investigations showed China-linked UNC3886 launched a targeted campaign against all four major […]

Масштабный взлом ПО Ivanti затронул госорганы ЕС, Нидерландов и Финляндии.

Cybersecurity teams are overwhelmed with data and short on clarity, while adversaries use AI to move faster and operate at unprecedented scale. Most organizations collect enormous volumes of findings: vulnerabilities, misconfigurations, penetration test results, detection gaps, threat intelligence, and control assessments. Individually, these data points may be accurate, but they don’t always reflect the big picture. As attackers increasingly leverage AI to rapidly identify weaknesses and chain exploits, defenders must keep pace by leveraging AI … More →

The post How AI is reshaping attack path analysis appeared first on Help Net Security.

The Netherlands' Dutch Data Protection Authority (AP) and the Council for the Judiciary confirmed both agencies (Rvdr) have disclosed that their systems were impacted by cyber attacks that exploited the recently disclosed security flaws in Ivanti Endpoint Manager Mobile (EPMM), according to a notice sent to the country's parliament on Friday. "On January 29, the National Cyber Security Center (

A dual Chinese and St. Kitts and Nevis national was sentenced to 20 years in prison in absentia for his role in an international cryptocurrency investment scheme (also known as pig butchering or romance baiting) that defrauded victims of more than $73 million. [...]

发现SessionFilter鉴权绕过、MyBatis拼接SQL注入、三处任意文件上传、两处任意文件读取及一处任意文件删除漏洞。

Discord users will soon see a change to how their accounts work. From early March 2026, access to some features will require age verification using an ID or a face scan. The changes follow earlier deployments in a small number of countries and will apply to both new and existing accounts. Under the updated model, accounts are placed into a teen-oriented experience unless the user confirms they are 18 or older. The change affects access … More →

The post Face scans and ID checks are coming to Discord appeared first on Help Net Security.

这些面向企业安全需求而设计的浏览器，大多基于 Chromium 内核，定位并非普通消费者使用场景。

22 года попыток сделать интернет безопасным. И всё равно всё упирается в вашу внимательность.

各位亲爱的白帽师傅们： 年味渐浓，新春将至！OSRC团队现将春节放假安排公示如下，同时也为各位白帽师傅们，送上最诚挚的新春祝福！ 放假时间 2026 年 2 月 15 日 — 2 月 23 日 温馨提示： 假期期间，各位师傅们仍可以通过平台向我们提交漏洞报告。 漏洞的审核与回复工作将有所延迟，请各位师傅耐心等候。 若遇特殊紧急情况，请直接联系 OSRC 官方小助手微信：opposrc2018，我们将及时响应。 新的一年，期待各位师傅继续深耕漏洞挖掘，多多提交有效报告，在 OSRC 平台再创佳绩，明年我们线下盛典的舞台，依然为最优秀的你预留！ 最后，提前祝大家新年快乐，马年吉祥，阖家幸福，万事顺遂！ OSRC 安全团队 2026 年 2月 10 日

A vulnerability was found in Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn. It has been rated as critical. This vulnerability affects the function sub_47D878. This manipulation of the argument src causes stack-based buffer overflow. This vulnerability is tracked as CVE-2023-45480. The attack is only possible within the local network. No exploit exists.

A vulnerability was found in Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn. It has been declared as critical. This affects the function sub_49E098 of the component Parameter Handler. The manipulation of the argument list results in stack-based buffer overflow. This vulnerability is identified as CVE-2023-45479. The attack can only be performed from the local network. There is not any exploit available.

A vulnerability, which was classified as problematic, has been found in QAD Search Server up to 1.0.0.315. Affected by this issue is some unknown functionality. This manipulation causes cross site scripting. This vulnerability appears as CVE-2023-45471. The attack may be initiated remotely. There is no available exploit.

Правительство готовит закон об обязательной проверке «опасного» ИИ.