Aggregator

关注高级攻防对抗技术热点，研究对手技术进行高级威胁模拟，研判攻击安全发展方向。

智能体时代，普通人如何获得进入新生产力时代的基本技能？

360首席科学家潘剑锋：智能体安全的核心，是驾驭AI不确定性

Ransomware attacks against European organizations increased during the first months of 2026, with third-party suppliers becoming a major entry point for attackers. Black Kite examined 2,066 ransomware incidents across 31 countries between January 2025 and April 2026 in its 2026 European Cyber Risk Report. Country distribution of ransomware attacks (Source: Black Kite) “Three forces are converging on European organisations at once: ransomware is accelerating, supply chains are becoming a primary attack path, and regulations are … More →

The post Ransomware gangs find Europe’s weakest link in third-party suppliers appeared first on Help Net Security.

Бывший аналитик Huntress пообещал через две недели опубликовать переписку компании с ФБР.

直播间虚假摆拍“绑架”并煽动网友报警，用AI生成“某景区玻璃桥坍塌”虚假视频，捏造“某企业车间爆炸”骇人谣言……近日，公安部网安局集中公布5起打击整治网络谣言典型案例，剑指虚构剧情、自导自演、利用AI工具造谣惑众等违法乱象。

完善网络生态治理长效机制，是治理理念、制度供给与实践路径的系统重塑，旨在把互联网这个“最大变量”转化为事业发展的“最大增量”。深刻把握法治的引领性、规范性与保障性，构建覆盖立法、执法、司法、守法全链条的治理新格局……

以美国、欧洲为代表的西方国家和地区在数据空间建设制度和应用上开展了早期实践，积累了具有一定借鉴价值的方案与经验。为提升数据空间建设效能，我国可借鉴其数据空间建设经验，发挥政策引领和市场优势，分层分类、因地制宜，充分挖掘数据要素价值……

6月25日，年度网络安全盛会——2026 CSOP·AI网络安全运营实战大会在北京拉开序幕。

2026年6月26日，深瞳漏洞实验室监测到一则Gogs组件存在目录遍历漏洞的信息，漏洞编号：CVE-2026-52813，漏洞威胁等级：严重。

The team behind Coinspaid Solutions steps into the spotlight with a mission to become the engineering voice of blockchain infrastructure.  

A newly uncovered infostealer called KuinaExtractor has been quietly evolving for over six months, posing a serious and growing threat to users across multiple platforms. Written in the Rust programming language, the malware targets browser data, cryptocurrency wallets, and credentials for popular services including Roblox, Steam, and Discord. What makes this threat particularly concerning is […]

The post KuinaExtractor Uses Telegram Exfiltration, UAC Bypass, and Sandbox Detection for Stealth appeared first on Cyber Security News.

美国主导召集旨在强化AI供应链的多边会议美国政府25日邀请加入多边合作框架“硅和平”的30多个国家和机构在华盛顿召开会议，该框架由美国主导，旨在加强对人工智能技术开发而言不可或缺的供应链。此举意在抗衡

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

An active phishing campaign has been targeting hotel and other hospitality organizations across Europe and Asia since April 2026, using photo-themed ZIP files to drop a Node.js implant and dig into front-desk machines, Microsoft says. The company has not attributed the activity to a known threat actor, and the operators' end goal is still unclear. The lure plays to how hotels work.

An active phishing campaign has been targeting hotel and other hospitality organizations across Eu

1.      nova勒索团伙公布新的受害公司 2.      dragonforce勒索团伙公布新的受害公司 3.      safepay勒索团伙公布新的受害公司

Mirage2FA, a phishing kit that combines short-lived HTML smuggling with obfuscated JavaScript loaders to deliver fake Microsoft 365 login pages and steal credentials during MFA prompts, has been identified by researchers at Fortra. Fortra based its analysis on a suspicious HTML and JavaScript attachment delivered by email, supporting DNS data, and the second-stage phishing page. Researchers said the campaign relied on business-themed lures, including secure documents, remittance services, automated billing, and payment requests. Opening the … More →

The post Mirage2FA phishing kit uses HTML smuggling to steal Microsoft 365 credentials appeared first on Help Net Security.