Aggregator
Please support the site operations by clicking ads.
CVE-2025-13283 | Chunghwa Telecom TenderDocTransfer prior 0.41.159 cross-site request forgery (EUVD-2025-197759)
CVE-2025-10460 | BEIMS Contractor Web 5.7 /BEIMSWeb/contractor.asp sql injection (EUVD-2025-197751)
CVE-2025-9501 | W3 Total Cache Plugin up to 2.8.12 on WordPress _parse_dynamic_mfunc os command injection (EUVD-2025-197764)
Strix: Open-source AI agents for penetration testing
Security teams know that application flaws tend to show up at the worst time. Strix presents itself as an open source way to catch them earlier by using autonomous agents that behave like human attackers. These agents run code, explore an application, uncover weaknesses, and prove those findings with working proof of concepts. Strix packages a hacker style toolkit into an automated system that can run alone or in groups. Its agents work together and … More →
The post Strix: Open-source AI agents for penetration testing appeared first on Help Net Security.
【已复现】AstrBot 远程代码执行漏洞(CVE-2025-55449)安全风险通告
Rust Adoption Drives Android Memory Safety Bugs Below 20% for First Time
Product showcase: SecAlerts – Relevant, actionable, up-to-the-minute vulnerability alerts
Do you spend countless hours tracking vulnerabilities in order to keep your software secure? Are you looking for a service to make your job easier by providing relevant, actionable vulnerability alerts? SecAlerts does just that. It saves you valuable time by delivering vulnerability alerts containing affected software and versions, as well as remedy information, directly to you. Our information is gathered from more than 100 sources as soon as it’s released, rather than relying solely … More →
The post Product showcase: SecAlerts – Relevant, actionable, up-to-the-minute vulnerability alerts appeared first on Help Net Security.
安全动态回顾|工信部通报39款关于侵害用户权益行为的APP 黑客滥用Triofox杀毒功能部署远程访问工具
AI-Slop勒索软件测试版潜入VS Code应用市场
【京麒沙龙18期】AI+移动安全专场精彩议题抢先看,周六不见不散!
活动福利来袭!享最高3倍积分,抢额外京东卡!
美国比特币矿场转向 AI 数据中心
Microsoft, почини уже панель задач. А потом говори про свой agentic OS
The year ahead in cyber: What’s next for cybersecurity in 2026
In this Help Net Security video, Dick O’Brien, Principal Intelligence Analyst at Symantec, outlines the major cyber risks expected in 2026. He explains that attackers are often breaching networks by targeting people instead of exploiting software flaws. The Shiny Hunters’ 2025 attack on Salesforce users is one example, where phishing and fake OAuth apps were used to steal data and demand ransom. O’Brien also discusses how AI tools could make scams and voice spoofs harder … More →
The post The year ahead in cyber: What’s next for cybersecurity in 2026 appeared first on Help Net Security.
中美 AI 冷战
Ваш ChatGPT глупее кошки. По крайней мере, так считает Янн Лекун. И уходит из Meta*
The next tech divide is written in AI diffusion
AI is spreading faster than any major technology in history, according to a Microsoft report. More than 1.2 billion people have used an AI tool within three years of the first mainstream releases. The growth is fast, but it puts uneven pressure on governments, industries, and security teams. Adoption grows at record speed The internet, radio, and smartphone all grew quickly. AI has grown faster. Adoption is strongest in countries that invested early in connectivity … More →
The post The next tech divide is written in AI diffusion appeared first on Help Net Security.
Можно ли запретить перепродажу Windows, назвав его произведением искусства? Суд ответил Microsoft жёстким «нет»
JonMon-Lite: The Remote Agentless EDR Proof-of-Concept for ETW Trace Monitoring
JonMon-Lite is a research proof-of-concept “Remote Agentless EDR” that creates an ETW Trace Session through a Data Collector
The post JonMon-Lite: The Remote Agentless EDR Proof-of-Concept for ETW Trace Monitoring appeared first on Penetration Testing Tools.