Aggregator

Subtle fluctuations in internet activity can serve as premonitory indicators of severe vulnerabilities long before their public disclosure.

The post The 11-Day Head Start: How “Internet Noise” Predicts the Next Major Zero-Day Breach appeared first on Penetration Testing Tools.

深度求索发布了 DeepSeek-V4 预览版。DeepSeek-V4 有两个版本，其中 Pro 版本有 1.6 万亿参数其中 490 亿活跃参数；Flash 版本有 2840 亿参数其中活跃参数 130 亿。两个版本都支持百万上下文。DeepSeek V4 除了支持英伟达 GPU 还支持华为昇腾 NPU。深度求索称，在 Agentic Coding 评测中，V4-Pro 已达到当前开源模型最佳水平，并在其他 Agent 相关评测中同样表现优异；Pro 在世界知识测评中，大幅领先其他开源模型，仅稍逊于顶尖闭源模型 Gemini-Pro-3.1；在数学、STEM、竞赛型代码的测评中，V4-Pro 超越当前所有已公开评测的开源模型。

The Windows Subsystem for Linux (WSL) has long been synonymous with contemporary iterations of the Windows operating system;

The post Retro Revolution: How One Hacker Brought the Windows Subsystem for Linux to Windows 95 appeared first on Penetration Testing Tools.

A sophisticated destructive malware, designated as Lotus Wiper, has been identified within Venezuela, specifically targeting the energy and

The post Digital Scorched Earth: The “Lotus Wiper” Attack Paralyzing Venezuela’s Energy Grid appeared first on Penetration Testing Tools.

Inexperienced North Korean cyber operatives have successfully exfiltrated millions of dollars in cryptocurrency over a span of several

The post The AI Multiplier: How North Korea’s “HexagonalRodent” Turned ChatGPT into a $12M Crypto Heist appeared first on Penetration Testing Tools.

While Iran remains sequestered from the global digital commons, a distinct narrative is gaining momentum within its borders:

The post Digital Siege: The “Midnight Hammer” and Iran’s 52-Day Descent into Absolute Isolation appeared first on Penetration Testing Tools.

Linux distributions have spent the past few years absorbing GPU vendor toolchains, Rust-based system components, and more stringent encryption defaults. Ubuntu 26.04 LTS, codenamed Resolute Raccoon, pulls most of those threads together into a single release that will receive standard security support until April 2031. Rust moves into the system layer One of the more consequential changes in this release is the expansion of memory-safe components at the OS level. Ubuntu 26.04 LTS ships with … More →

The post Ubuntu 26.04 LTS delivers memory-safe system tools and live patching for Arm servers appeared first on Help Net Security.

Routers that have long been decommissioned from official support have suddenly become the epicenter of a resurgent wave

The post Ancient D-Link Routers Hijacked by New “Tuxnokill” Mirai Botnet appeared first on Penetration Testing Tools.

Apple has expeditiously addressed a critical vulnerability within the iPhone and iPad architecture, wherein notifications designated for deletion

The post Apple Issues Emergency Fix for iPhone Notification “Leaks” Exploited by Forensics appeared first on Penetration Testing Tools.

Ransomware attackers are no longer relying only on widely known tools to steal data. Affiliates linked to the Trigona ransomware group have taken a more calculated approach by building their own custom data exfiltration tool, one that gives them greater precision, speed, and control over the data theft process. The Trigona ransomware first surfaced in […]

The post Ransomware Hackers Develop Custom Exfiltration Tool to Steal Sensitive Data appeared first on Cyber Security News.

An unforeseen regression within a software update has inadvertently caused a security mechanism to serve as a gateway

The post The Critical 9.1 Flaw in ASP.NET Core that Turns Cookies into Master Keys appeared first on Penetration Testing Tools.

В четырех российских городах прошли обыски.

1.      chaos勒索团伙公布新的受害公司 2.      coinbasecartel勒索团伙入侵印度尼西亚农业部 3.      genesis勒索团伙公布新的受害公司

A high-severity security flaw in LMDeploy, an open-source toolkit for compressing, deploying, and serving large language models (LLMs), has come under active exploitation in the wild less than 13 hours after its public disclosure. The vulnerability, tracked as CVE-2026-33626 (CVSS score: 7.5), relates to a Server-Side Request Forgery (SSRF) vulnerability that could be exploited to access

在最近举行的员工大会上，即将卸任的苹果 CEO 库克（Tim Cook）称 2012 年上线 Apple Maps 是其任内第一个真正的重大失误。当时的 Apple Maps 还比较原始，尚未准备好。它的失败迫使库克向用户道歉，并建议用户使用竞争对手的地图应用。库克表示这次重大失败还是富有价值的，“这体现了我们始终将用户放置在决策中心。现在我们拥有全世界最好的地图应用。我们学会了坚持，犯了错误但做了正确的事。”

Your legal team just handed you a 400-page document and said "figure out compliance." The EU AI Act is live, your organization falls under its scope, which is broader than many expect. Even non‑EU companies must comply if their AI systems are used, deployed, or produce effects within the European Union. In practice, that means that global organizations [...]

The post The Governance Gap: How the EU AI Act Makes API Security a Compliance Imperative appeared first on Wallarm.

The post The Governance Gap: How the EU AI Act Makes API Security a Compliance Imperative appeared first on Security Boulevard.

A vulnerability, which was classified as problematic, has been found in Ollama. Affected is an unknown function of the component GGUF Quantization. Performing a manipulation results in memory leak. This vulnerability is known as CVE-2026-5757. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability classified as critical was found in DeltaWW AS320T up to 1.14. This impacts an unknown function. Such manipulation leads to backdoor. This vulnerability is traded as CVE-2026-1952. The attack may be launched remotely. There is no exploit available.

A vulnerability classified as critical has been found in DeltaWW AS320T up to 1.10. This affects an unknown function. This manipulation causes stack-based buffer overflow. This vulnerability appears as CVE-2026-1951. The attack may be initiated remotely. There is no available exploit.

A vulnerability described as critical has been identified in DeltaWW AS320T up to 1.14. The impacted element is an unknown function. The manipulation results in stack-based buffer overflow. This vulnerability is reported as CVE-2026-1950. The attack can be launched remotely. No exploit exists.