Aggregator

Самая «осторожная» ИИ-компания решила, что безопасность подождет.

通过继承链访问 catch_warnings.__init__.__globals__，绕过限制获取原始 __builtins__，实现任意代码执行。

The Scattered Lapsus$ Hunters (SLH) hacking collective has launched a recruitment push aimed specifically at women, offering cash payments for participating in voice-phishing (vishing) attacks. A few days ago, threat intelligence firm Dataminr detected posts on a public Telegram channel advertising roles for female callers willing to conduct social-engineering phone operations. SLH’s recruitment ad (Source: Dataminr) The group is apparently offering between $500 and $1,000 per call, up front, and is supplying prepared scripts to … More →

The post Scattered Lapsus$ Hunters seeks women for vishing attacks appeared first on Help Net Security.

Исследователи выяснили: мы с машинами говорим на разных языка. И это опаснее, чем кажется.

用 frida 向 React Native 动态注入 js 代码

UNC2814 hit 53 victims in 42 countries with novel backdoor in decade long cyber espionage operation

Introduction: Steal It Today, Break It in a Decade Digital evolution is unstoppable, and though the pace may vary, things tend to fall into place sooner rather than later. That, of course, applies to adversaries as well. The rise of ransomware and cyber extortion generated funding for a complex and highly professional criminal ecosystem. The era of the cloud brought general availability of

Забудьте про письма от принцев – теперь присылают вредоносный Next.js.

速修复

速修复

关于四种Tomcat内存马的一些学习与思考

New York Attorney General Letitia James sued video game developer and publisher Valve Corporation for using game loot boxes to facilitate illegal gambling activities among children and teenagers. [...]

AgentSmith-HUB v0.1.8 更新说明

Cisco SD-WAN vulnerability CVE-2026-20127 has been exploited since 2023 to gain unauthenticated admin access. A critical Cisco SD-WAN vulnerability, tracked as CVE-2026-20127 (CVSS score of 10.0), has been actively exploited since 2023. The flaw affects Catalyst SD-WAN Controller and Manager and allows remote, unauthenticated attackers to bypass authentication and gain full administrative access by sending […]

BAE Systems планирует сделать радиоэлектронную борьбу массовой.

История успеха (и вреда) нового шифровальщика, который заменил закрытый Phobos.

关键词网络病毒安全研究人员发现，一起新的 NPM 供应链攻击利用“图片藏毒”技术传播远控木马。

关键词网络攻击安全公司 Sansec 披露，一家全球前十的大型连锁超市电商网站被植入数字支付窃取器（payme