Aggregator

ESET Research has been monitoring attacks involving the recently discovered ToolShell zero-day vulnerabilities

TensorFlow 提供了 `tf.random` 模块用于控制随机数生成器。文章介绍了 `tf.random.Generator` 类及其与 `tf.function` 和分布策略的交互方式，并讨论了如何创建独立随机流、保存生成器以及使用无状态 RNG 函数。还提到了不同算法（如 Philox 和 ThreeFry）及其在不同设备上的性能差异。

The Critical Disciples of Incident Response and Crisis Management in Cybersecurity
If you're looking for a career that lets you serve your community and protect critical systems, cybersecurity may be right for you. It offers more than just technical work. It's a crisis discipline and increasingly, one of the most vital roles in disaster resilience.

Experts Warn White House AI Action Plan Could Prioritize Deregulation Over Security
The Trump administration pledged Wednesday an offensive against "red tape" hindering artificial intelligence developers in federal and state governments while vowing to ensure that such systems are objective "rather than pursue social engineering agendas."

Healthcare Providers Are Among Dozens of Entities Hit Since Gang Emerged in 2024
U.S. authorities are warning of threats posed by double-extortion gang Interlock, which has been hitting an assortment of businesses across many industries, including healthcare and other critical infrastructure sectors, with a ransomware variant first seen in September 2024.

Series D Raise Targets Security Automation, Trust Centers and Zero-Touch Reviews
With $150 million in new Series D funding at a $4.15 billion valuation, Vanta plans to accelerate its AI-powered trust platform across new markets including government compliance. The company’s tools automate evidence collection, risk management and policy enforcement in real time.

OpenAI's New Agent Automates Tasks, Amid Limits and Privacy Concerns
OpenAI's new ChatGPT Agent can code, browse and send email. The agent excels at tightly scoped, well-structured workflows, such as finding names, drafting content or automating click-heavy tasks, but struggles with ambiguity, creativity or judgment-heavy assignments.

8月9日，我们在杭州等你！

少数派编辑部分享了近期使用的新产品体验：老麦吐槽了声称能发电的手机壳货不对板；Pt介绍了像瓦力一样的AI桌面机器人LOOI；克莱德展示了绿联理线器的实用性；Tp分享了拓麻歌子Paradise的趣味玩法；Lincoln则评测了Kindle Colorsoft的阅读体验。

Firefox本身运行良好且隐私性佳，但Mozilla管理层决策失误频发：解散Rust和Servo团队、收购广告公司、撤回隐私承诺、热衷AI项目却裁员等。公司长期依赖Google分成维持运营，缺乏造血能力。专家建议其专注于开源浏览器和捍卫网络开放标准。

文章指出网络攻击日益复杂化，人为错误成为主要突破口。意大利国家网络安全局发布指南，强调提升员工安全意识的重要性，并提出通过培训和规范行为将员工从漏洞转变为防线。

В числе исправлений — баги в JIT-компиляторе, CSP и механизмах загрузки.

Before rushing to prove that you're not a robot, be wary of deceptive human verification pages as an increasingly popular vector for delivering malware

一个黑客社区，旨在帮助新手成长为专家。提供问答、学习资源和地下技能交流。用户可加入Discord群组进一步互动。

一名即将毕业的高中生在考虑选择计算机科学还是信息技术作为专业方向，并询问哪种学位对网络安全领域更有帮助或更具灵活性。

索尼正在测试 PlayStation 5 的省电(Power Saver)模式，官方博客解释称，该选项将允许游戏以更低的功耗运行。该功能目前处于 Beta 测试阶段，正式上线之后玩家将可以选择“省电”选项。启用省电模式后，支持的 PS5 游戏将会降低性能，从而降低 PS5 的功耗，不支持的游戏则性能和功耗都不会降低。对于何谓降低性能，索尼称 VR 模式将不可用，部分游戏功能可能会受限。

博通限制VMware永久许可证用户下载安全更新，要求购买订阅并签署支持合同。未授权客户需等待90天以上才能获得补丁，面临严重安全风险。荷兰法院裁定博通需继续为RWS提供两年支持以应对迁移需求。

Подумал — сжал пальцы — написал слово в воздухе.