Aggregator

Unit 42披露针对Google同步Passkey生态系统的三类新型攻击（Pass-ta-key、Silver Pass-ta-key、Golden Pass-ta-key），利用恶意软件在已沦陷终端上绕过用户验证、窃取主密钥或注册攻击者控制的验证密钥，实现完全无需用户交互的账户接管。

Хищения со счетов компаний выросли почти в два раза.

沙特牵头的财团完成对美国游戏公司 EA 的私有化。参与私有化的财团包括了沙特主权基金 Public Investment Fund (PIF)、私募股权公司 Silver Lake 以及特朗普女婿 Jared Kushner 创立的 Affinity Partners。EA 旗下的知名游戏包括 EA Sports FC、战地、模拟人生、质量效应等等。摩根大通银行为这笔交易提供了 200 亿美元的债务融资，这笔债务将由私有化后的 EA 承担。分析师担心为偿还债务 EA 将会大规模裁员、推动更激进化的盈利手段等。Game Business 主编兼联合创始人 Christopher Dring 指出私募股权公司通常在公司管理上相当激进。这笔交易是游戏史上第二大收购案，仅次于微软以 690 亿美元收购动视暴雪。

13 августа пройдёт бесплатный однодневный практический интенсив, посвящённый настройке и эксплуатации NGFW UserGate.

Cybersecurity researchers have disclosed what has been described as a "long-standing supply chain attack" on QuickFox, a virtual private network (VPN) and network acceleration tool designed for overseas Chinese users. According to Fortinet FortiGuard Labs, the supply chain attack has been ongoing since at least August 2025 and involves a trojanized version of the application to deliver FDMTP, a

Microsoft Defender’s new automatic device isolation capability has emerged as a decisive control against modern ransomware intrusions that abuse legitimate Windows binaries, as demonstrated in a recent incident at QNET where a multi-stage attack was stopped in just 128 seconds. The mshta.exe process reached out to attacker-controlled infrastructure, retrieved a remote second-stage payload, and began […]

The post Ransomware Attack Abuses Legitimate Windows Tool to Evade Traditional Containment appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Хвалёный стандарт безопасности рухнул из-за нелепой оплошности создателей.

Future AGI is an open-source platform for tracing, evaluating, simulating, and guardrailing LLM agents, licensed Apache 2.0 and self-hostable. Self-hosted instances register with Future AGI on first boot and send an instance ID, a version string, a deployment type, and the email addresses and domains of active admin users. That registration fires once, before anyone signs in to the dashboard. The opt-out is one environment variable, FUTURE_AGI_TELEMETRY_DISABLED=1, placed in .env ahead of the first start. … More →

The post Future AGI: Open-source platform for shipping self-improving AI agents appeared first on Help Net Security.

Botnet operators are systematically probing router diagnostic interfaces for OS command injection flaws, chaining default credentials, legacy CGI endpoints, and weak command execution patterns to gain full remote control and deploy Mirai‑like payloads. Recent scan telemetry shows concentrated HTTP requests targeting a tight set of “diagnostic” URLs on internet‑exposed routers, including /apply.cgi, /cgi-bin/diagnostic.cgi, /cgi-bin/adv_ping.cgi, /DiagnosticsMsg.cgi, […]

The post Botnet Scans Router Diagnostic Tools for OS Command Injection Vulnerabilities appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A serious one-click remote code execution (RCE) vulnerability that affects Cursor, Microsoft Visual Studio Code, and Google Antigravity, an AI-assisted coding environment. This flaw could enable attackers to hide malicious commands within links embedded in commit messages, turning a routine developer action into a complete compromise of their endpoint. A victim simply needs to click […]

The post 1-Click RCE Vulnerability in Cursor, VS Code, and Google Antigravity Lets Attackers Execute Arbitrary Code appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A controlled proof-of-concept by Barracuda’s Red Team has demonstrated how a compromised Microsoft 365 account with Copilot access can serve as a powerful launchpad for business email compromise (BEC). This scenario ultimately enables attackers to impersonate a CEO and redirect a $247,500 wire transfer. Research published on August 4, 2026, warns that AI-enabled email accounts […]

The post Compromised Microsoft Copilot Accounts Let Hackers Impersonate CEOs and Steal $247,500 appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Алгоритмы проигнорировали контекст и запустили необратимый сценарий.

Here’s an uncomfortable truth: the attack that gets you won’t look like an attack. It’ll look like a normal login, a normal file share, a normal permission request you clicked past without reading. You don’t have a phishing problem, a DLP problem, or an OAuth problem. You have one problem wearing three masks, and most security stacks aren’t built to address this. Material Security designed its platform from a fresh point of view: stop defending … More →

The post Product showcase: Material unifies Google Workspace email, file & OAuth defense appeared first on Help Net Security.

旁遮普警方今年5月公布一个数字：辛度尔行动一年来，全印17个邦抓获457名与巴基斯坦有关的间谍或关联人员。这

2026年8月4日,日本内阁通过了年度《防卫白皮书》,白皮书用大篇幅强调要加快无人机和AI在自卫队作战体系中的

Хакеры заражают ноутбуки журналистов и учёных прямо в гостиничных номерах.

Engineers at an Israeli food producer spent most of a week rebuilding a refrigeration system after an intruder switched the gas cooler and receiver valves to manual and pinned them open. Liquid CO2 flooded the compressors and destroyed them. The replacement units did not match the originals, so the whole system had to be reworked and recharged with gas. That incident is one of roughly forty in Kaspersky ICS CERT’s quarterly roundup of attacks on … More →

The post What stops attackers wrecking industrial plants is knowing how appeared first on Help Net Security.

美国联邦通信委员会（FCC）正在制定措施禁止进口中国制造的光收发模块。光收发模块让数据在数据中心内以光速通过光纤传输。美国政府官员希望这项措施在年内公布和生效。其目的是防止中国公司窃取数据、植入恶意软件或干扰美国数据中心的服务。FCC 也可能修改或搁置这项进口禁令。美国对中国数据中心设备的禁令可能会冲击中际旭创。中际旭创是全球最大的光收发模块供应商之一。禁令也可能增加亚马逊 AWS 等美国云计算公司的成本，迫使它们转向本国供应商如 Coherent 和 Lumentum。

2026年7月23日，Linux内核主线合入了一份很短的补丁。

Главную улику криминалистов записывали в обычный документ без базовой защиты.