Aggregator

Customers of upscale department store chain Nordstrom received fraudulent messages from a legitimate company email address that promoted cryptocurrency scams disguised as a St. Patrick's Day promotion. [...]

三星三折叠屏智能手机 Galaxy Z TriFold 仅仅上市数个月就面临停售，原因是生产成本过高和供应有限。Galaxy Z TriFold 于四个月前在韩国发布，今年一月开始在美国等市场发售，售价 2899 美元。对于在韩国销售的 Galaxy Z TriFold，三星将在本周最后一次补货。美国的库存补充次数可能更多，将会持续到产量售罄为止。三折叠屏智能手机的寿命相当短暂。

Graylog has revealed advances in explainable AI and automated investigation workflows that help small-to-mid-sized security teams detect threats faster, investigate with confidence, and cut the manual documentation work that consumes analyst time. “Lean security teams don’t have the luxury of analyst bench depth or months of automation tuning,” said Andy Grolnick, CEO of Graylog. “Every capability we are showing at RSA is designed around the same principle: rapidly detect, decide, and document from one command … More →

The post Graylog advances explainable AI and automated workflows for faster threat detection appeared first on Help Net Security.

图灵奖得主 Yann LeCun 等人在预印本平台 arXiv 上发布论文，讨论了目前的 AI 模型在自主学习上的局限性，提出了一个受人类等启发的自主学习框架。AI 模型一旦部署，基本上无法学习任何新知识，模型的操作是固定的，如果不能适应环境，就必须由人类专家使用新数据重构。人类儿童能在不同学习模式之间切换，但 AI 模型的自监督学习、监督学习和强化学习等机器学习范式则是孤立的，混合使用不同学习模式主要是通过人类专家反复试验实现，只能针对特定应用如聊天机器人或编程助手。换句话说，当前的 AI 系统的学习是外包给人类专家，而不是其自身固有的能力。要构建能在现实世界中可靠运行的 AI 系统，自主学习应视为一项核心能力。

Государство придумало, как бороться с кредитным мошенничеством.

前天还在研究哪种codingplan适合养龙虾，经过这两天的实测，minimax的codingplan感觉不是

Квантовым суперкомпьютерам больше не нужны гигантские холодильники за миллионы долларов.

Mozilla is adding a free built-in VPN to Firefox, with the feature arriving in Firefox 149 on March 24. Privacy concerns often follow free VPN services, especially when unclear data practices put user information at risk. Mozilla says its version is grounded in its data principles and focus on trust, aiming to avoid the kinds of arrangements that have raised questions in the past. The feature routes browser traffic through a proxy to mask a … More →

The post Firefox is getting a free built-in VPN appeared first on Help Net Security.

The suspected India-linked threat group targets governments, telecom, and critical infrastructure using spear-phishing, old vulnerabilities, and rapidly rotating infrastructure to maintain persistent access.

Tracking pixels let social media companies spy on their users even after they click over to advertiser sites, gleaning credit card info, geolocations, and more, according to an analysis.

Rapid7 says median time from publication to CISA KEV inclusion dropped to five days

We are expanding Regional Services with new pre-defined regions and the launch of Custom Regions. Customers can now define precise geographical boundaries for data processing, tailored to meet their compliance and performance needs.

鹈鹕、Three.js 与 Rebecca，评测 LLM 能力的标尺。

Corelight has introduced a new set of agentic AI capabilities aimed at helping security operations centers (SOCs) cut down on repetitive, time-consuming tasks. The updates are designed to boost analyst efficiency, speed up response times, and build trust through greater transparency. The release includes Agentic Triage to streamline SOC workflows, a new suite of machine learning models that turn encrypted traffic blind spots into actionable evidence, and expanded integrations “By pairing the industry’s highest-fidelity network … More →

The post Corelight’s Agentic Triage turns SOC alerts into evidence-backed investigations appeared first on Help Net Security.

Кому придется отдать свои домены государству?

TrojAI has announced major new capabilities designed to secure the growing deployment of agentic AI in the enterprise going beyond the prompt layer. “The innovations we are unveiling this week address some of the most significant and rapid changes to the AI security ecosystem. Enterprise deployment of agents is accelerating quickly, and these new TrojAI capabilities enable a new level of visibility and protection needed for the Agentic enterprise,” said Lee Weiner, CEO of TrojAI. … More →

The post TrojAI unveils new capabilities to secure agentic AI beyond the prompt layer appeared first on Help Net Security.

Cybersecurity researchers have disclosed a critical security flaw impacting the GNU InetUtils telnet daemon (telnetd) that could be exploited by an unauthenticated remote attacker to execute arbitrary code with elevated privileges. The vulnerability, tracked as CVE-2026-32746, carries a CVSS score of 9.8 out of 10.0. It has been described as a case of out-of-bounds write in the LINEMODE Set

Mobile internet in Moscow has been intermittently disrupted since March 6, with some areas still experiencing outages, local reports say.

Researchers at Howler Cell have discovered a new .NET AOT malware campaign that uses a clever scoring system…

Veracode has unveiled Veracode Fix for Software Composition Analysis (SCA), an AI-powered solution to address software supply chain risk. The enhanced automated remediation engine, the next evolution of Veracode’s Fix solution, enables organizations to detect and remediate open-source vulnerabilities easily, before code reaches production. Designed to integrate seamlessly into existing developer workflows, it delivers third-party updates and first-party code refactoring without breaking builds or disrupting development. In 2025, software supply chain breaches accounted for 30% … More →

The post Veracode Fix for SCA automates open-source vulnerability fixes appeared first on Help Net Security.