Aggregator

当前环境异常，需完成验证后继续访问。

欧洲核子研究中心的BAS合作组首次让反质子在量子自旋状态间持续振荡近一分钟，实现了首个反物质量子比特。这一突破为比较物质与反物质的行为差异提供了新方法，并为检验CPT对称性等基本物理法则提供了精密工具。

欧洲核子研究中心（CERN）的 BAS 合作组首次让一个反质子在量子“自旋上”与“自旋下”状态之间持续稳定地振荡了近一分钟。这标志着首个反物质量子比特的诞生，是反物质研究领域取得的一次重大突破，为更精准地比较物质与反物质的行为差异开辟了新路径。反质子是质子的反物质对应粒子，质量相同但电荷相反。它们就像微小的条形磁铁，可以因量子自旋的不同朝向“上”或“下”两个方向。科学家可利用“相干量子跃迁光谱”技术，测量这些所谓“磁矩”翻转的方式。这项技术不仅在量子传感和量子信息处理中具有重要作用，也为检验自然界基本法则提供了精密工具，特别是电荷－宇称－时间（CPT）对称性。这种对称性规定，物质与反物质在所有物理行为上应完全一致，然而科学家观察到的宇宙却几乎完全由物质构成，这与理论存在明显矛盾。

苹果发布iOS 26、iPadOS 26等公测版系统，支持iPhone 11及以上机型、部分iPad及Apple Watch设备升级。用户需备份数据并注册Beta计划后更新。若需降级可下载固件包恢复至稳定版本，Apple Watch需前往官方店降级。

Tech Minds频道的Matt评测了美国制造的HydraSDR RFOne软件定义无线电设备。该设备设计参考Airspy R2，由曾参与Airspy设计的团队开发。评测中展示了规格、拆解、固件更新及在SDR++中的良好性能测试。

#网站应用 谷歌短网址系统 goo.gl 将从 8 月 25 日开始彻底停止服务，现有超过 1 亿个短网址链接都将返回 HTTP 404 错误。1 年前谷歌就通知要关闭短网址服务，现在

强势围观！

由于环境异常，请完成验证以继续访问。

穿透DOM堡垒：三重绕过技术实现数据外泄

文章讲述了乐队背后的艰辛与坚持。大多数乐队默默无闻，设备简陋，排练时间有限。尽管投入大量时间和精力，回报却微薄。有人因各种原因离开，乐队解散如玻璃杯摔碎无声。Power Milk乐队在低谷后重聚，并通过众筹成功发行专辑《今晚大劳苦》，传递不完美中的美好与坚持。

丹麦信贷机构因服务器配置错误泄露瑞典数亿条个人信息和企业数据，包含财务记录等敏感信息，后被锁定。

A vulnerability was found in Linux Kernel up to 6.12.4. It has been rated as problematic. Affected by this issue is the function ocfs2_get_init_inode. The manipulation leads to improper initialization. This vulnerability is handled as CVE-2024-56630. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic has been found in Linux Kernel up to 6.1.119/6.6.65/6.12.4. Affected is the function ksmbd_vfs_stream_read of the file ksmbd.conf of the component Setting Handler. The manipulation of the argument streams_xattr leads to out-of-bounds read. This vulnerability is traded as CVE-2024-56627. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic has been found in Linux Kernel up to 5.15.173/6.1.119/6.6.65/6.12.4. This affects the function can_set_termination in the library /drivers/gpio/gpiolib.c. The manipulation leads to privilege escalation. This vulnerability is uniquely identified as CVE-2024-56625. The attack needs to be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Linux Kernel up to 5.10.230/5.15.173/6.1.119/6.6.65/6.12.4. This affects the function dpc_thread of the file mm/slub.c. The manipulation leads to use after free. This vulnerability is uniquely identified as CVE-2024-56623. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 6.1.119/6.6.65/6.12.4 and classified as critical. Affected by this vulnerability is the function ksmbd_vfs_stream_write of the file ksmbd.conf. The manipulation leads to out-of-bounds write. This vulnerability is known as CVE-2024-56626. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.12.4. This issue affects the function ufshcd_remove of the component scsi. The manipulation leads to null pointer dereference. The identification of this vulnerability is CVE-2024-56621. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.12.4. It has been declared as critical. This vulnerability affects the function nilfs_find_entry. The manipulation leads to use after free. This vulnerability was named CVE-2024-56619. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in Linux Kernel up to 6.12.4 on Dahlia. This affects an unknown part of the component pmdomain. The manipulation leads to denial of service. This vulnerability is uniquely identified as CVE-2024-56618. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.

The Dropping Elephant advanced persistent threat group has launched a sophisticated cyber-espionage campaign targeting Turkish defense contractors, particularly companies manufacturing precision-guided missile systems. This malicious operation represents a significant evolution in the group’s capabilities, employing a complex five-stage execution chain that cleverly disguises malicious payloads as legitimate conference invitations related to unmanned vehicle systems. The […]

The post Elephant APT Group Attacking Defense Industry Leveraging VLC Player, and Encrypted Shellcode appeared first on Cyber Security News.