Aggregator

根据内部通讯，从周四开始，欧洲议会将在内部计算机上用法国搜索引擎取代谷歌作为默认搜索工具。在一封电子邮件中，官员们告诉议员，截至6月4日，Qwant将取代谷歌成为欧洲议会计算机上的默认搜索引擎。这一改

Гидрогелевый пластырь уже доказал свою эффективность, однако до пациентов технология доберётся не сразу.

Submit #831461 / VDB-368251

In a recent GitGuardian analysis, an average of 150 secrets were found on a sample of developer endpoints. Private keys accounted for 38% of unique secrets, while cloud, identity provider, and secret management credentials (AWS IAM, Hashicorp vault) added another 22%. Those figures should not be treated as a universal prevalence estimate for every developer machine, but they are directionally significant. They show how much credential material can accumulate outside the places security teams usually … More →

The post Attackers already know the secrets are on your developers’ machines. Do you? appeared first on Help Net Security.

A CVSS score 7.2 AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Andy Niu of TrendAI Research' was reported to the affected vendor on: 2026-06-04, 12 days ago. The vendor is given until 2026-10-02 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Ahmed Kamal of TrendAI ' was reported to the affected vendor on: 2026-06-04, 12 days ago. The vendor is given until 2026-10-02 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

2026年06月02日（現地時間）、米国CISAがCISA ICS Advisory / ICS Medical Advisoryを公表しました。

Submit #831456 / VDB-368250

Submit #831455 / VDB-368250

Submit #831452 / VDB-368249

На бумаге всё выглядело как обычный бизнес, пока платежи не начали вести прямиком в даркнет.

error code: 1003

俄罗斯联邦安全局（FSB）发布消息，指控境外情报机构在俄方高级官员手机中植入恶意程序，用以窃听通话、远程开启设备摄像头，但未披露任何技术实证，也未指明涉事国家。   2026 年 6 月 2 日，俄罗斯联邦安全局发布通报，称破获并查实一起境外情报部门发起的大规模情报窃取行动，目标为俄高层公务人员的移动终端。相关设备遭植入间谍恶意软件，可窃取本机数据、截获通话录音，还能在后台私自启用麦克风...

Trend Micro Mobile Security for iOS protects devices from potentially harmful websites while browsing, blocks ads and personal information trackers, helps users avoid unsafe Wi-Fi networks, and monitors data usage. The app is available for both iOS and Android devices. Getting Started After installing the app from the App Store, I created an account to start using it. Account creation is handled through Trend Micro’s TrendLife platform. Once installed, the app automatically scanned the device … More →

The post Product showcase: Trend Micro Mobile Security detects scams in messages, QR codes, and websites appeared first on Help Net Security.

优步科技公司表示，正在包括人力资源、招聘、办公场所设施和文化等业务的部门裁员23%，以简化公司团队结构。据公司发言人表示，对“人员与场所”部门的裁员，其中许多是高级职位，仅占优步全球3.4万名员工的不

The Velocity of Capital Exfiltration The elite perpetrator behind one of the year’s most catastrophic cryptocurrency exploits successfully obscured the trail of stolen capital. Specifically, the adversary laundered hundreds of millions of dollars within...

The post The Digital Disappearance: Sovereign Laundering Erases the Kelp DAO Trail appeared first on Information Security News.

Граница между отчётом и инструкцией оказалась куда тоньше, чем хотелось бы ИБ-специалистам.

The Scale of Malicious Domain Registrations Every fifth newly registered domain may actively serve cybercriminals. Consequently, this alarming conclusion stems from a comprehensive 2025 domain market analysis by Interisle Consulting. According to the report,...

The post The Compromised Registry: One in Five New Domains Serves Cybercrime appeared first on Information Security News.

xAI据悉暂停招聘用于训练Grok的“AI导师”知情人士透露，马斯克旗下的 xAI 已暂停招聘用于训练Grok的专业人员，这标志着其开发技术的方式可能将发生转变。自今年年初以来， xAI 公司一直在努