Aggregator

所有旧版均受影响，速升 3.11.2 堵死逃逸通道。

5月15日，我们北京见，欢迎报名！

看雪论坛作者ID：ZyOrca

A fake version for the Claude AI website offers a malicious Claude-Pro Relay download that pushes a previously undocumented backdoor for Windows named Beagle. [...]

Rep. Summer Lee’s letter, first reported by CyberScoop, follows ICE confirmation of using spyware and news of a Trump ally becoming NSO Group’s executive chairman.

The post One House Democrat is pressing Commerce on the government’s spyware use appeared first on CyberScoop.

МВД рассказало о спасении двух россиянок из мошеннических кол-центров.

EvilWAF is an advanced transparent MITM Firewall bypass proxy and deep WAF vulnerability scanner designed for authorized security testing.

The post Ghost in the Firewall: Mastering Stealth Audits with EvilWAF’s Transparent MITM and Multi-Layer Scanner appeared first on Penetration Testing Tools.

美国CI Fortify计划以“隔离与恢复”重塑关键服务生存能力

长期无法访问超级模型，该如何构建防御方法

Ubuntu services have endured several days of tumultuous disruptions due to a formidable assault, and a fresh controversy

The post Cloudflare Under Fire as “Beamed” Service Cripples Ubuntu’s Global Infrastructure appeared first on Penetration Testing Tools.

2026年4月，网络谣言主要集中在公共安全、民生政策、农业生产、旅游消费等领域。造谣者或假冒官方、炮制虚假骗局，或歪曲事实、编造离奇故事，误导公众认知、扰乱社会秩序、影响市场预期。

近日，国家网信办、国家发展改革委、工业和信息化部、公安部、市场监管总局联合公布《人工智能拟人化互动服务管理暂行办法》，办法将于7月15日起施行。

《中国网络法治发展报告（2025年）》为厘清网络法治工作历史脉络、把握网络法治建设历史方位、找准网络法治建设发展方向提供了权威参考，彰显了我国网络法治建设从夯基垒台、强基固本迈向全面建设、深入推进的高质量发展新阶段。

近日，国家信息安全漏洞库（CNNVD）收到关于Ollama安全漏洞（CNNVD-202605-502、CVE-2026-7482）情况的报送。

本文通过对生成式人工智能内容安全责任主体的系统研究，得出以下核心结论：第一，责任配置应当遵循“谁控制、谁负责”的基本原则，将内容安全主体责任赋予对应用场景具有实质控制权的服务提供者……

A vulnerability was found in Wireshark and classified as problematic. Impacted is an unknown function of the file epan/dissectors/packet-nfs.c of the component NFS Dissector. Executing a manipulation can lead to resource consumption. This vulnerability is handled as CVE-2020-13164. The attack can be executed remotely. There is not any exploit available. It is suggested to upgrade the affected component.

A vulnerability classified as problematic has been found in Wireshark up to 3.4.15/3.6.7. Impacted is an unknown function of the component F5 Ethernet Trailer Protocol Dissector. Performing a manipulation results in denial of service. This vulnerability is cataloged as CVE-2022-3190. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability categorized as problematic has been discovered in Wireshark up to 3.6.10/4.0.2. The impacted element is an unknown function of the component Capture File Handler. The manipulation results in denial of service. This vulnerability is reported as CVE-2023-0413. The attack can be launched remotely. No exploit exists. It is advisable to upgrade the affected component.

A vulnerability was found in Wireshark up to 3.6.10/4.0.2. It has been declared as problematic. Impacted is an unknown function of the component Dissector. Executing a manipulation can lead to denial of service. This vulnerability is registered as CVE-2023-0411. It is possible to launch the attack remotely. No exploit is available. It is recommended to upgrade the affected component.