Aggregator

Ваш провайдер есть в реестре? Если нет — готовьте деньги и объяснения

Google has introduced a new security configuration on Android, tailored for users vulnerable to targeted cyberattacks. Known as Advanced Protection, this suite of features—once exclusive to individual Google Accounts—is now available at the device...

The post Android & Chrome Level Up Security with New Advanced Protection for High-Risk Users appeared first on Penetration Testing Tools.

Microsoft is preparing a significant update for users of its Authenticator app on iOS devices. Beginning in September, a new backup system will roll out, eliminating the need to sign in with a personal...

The post Microsoft Authenticator for iOS: Cloud Backups Arrive, Ditching Personal Accounts appeared first on Penetration Testing Tools.

Microsoft has introduced a long-anticipated feature in Windows 11 that allows administrators to remove preinstalled Microsoft Store applications via official Group Policy. The new functionality, titled Remove Default Microsoft Store Packages, is already available...

The post Windows 11 Gets Native App Removal: Bye-Bye Bloatware via Group Policy appeared first on Penetration Testing Tools.

黄豆安全实验室发现Telegram消息屏蔽绕过0day漏洞可深度利用，影响所有私密频道和群组。攻击者可查看敏感数据、媒体文件及已封禁内容。尽管原始漏洞已修复但仍有绕过方式。建议用户避免在私密群组存储敏感信息以保护隐私安全。

A researcher at Positive Technologies has uncovered a critical vulnerability in the implementation of the NTFS file system, which enables a local attacker to escalate privileges to SYSTEM by leveraging a specially crafted virtual...

The post Critical NTFS Vulnerability (CVE-2025-49689) Uncovered: Local Attacker Can Gain SYSTEM Privileges in Windows 11 appeared first on Penetration Testing Tools.

As healthcare providers and their vendors develop and implement agentic artificial intelligence and other AI tools, they need to throughly understand data privacy risks under HIPAA and other laws, said attorney Jordan Cohen of law firm Akerman LLP.

AI Models Mostly Fail in Full Track of Vulnerability Research to Exploit
The rise of code-illiterate but AI-enabled script kiddies able to wreak havoc by weaponizing software vulnerabilities into automated exploits, thanks to expert-level assistance from large language models, remains but a future possibility, based on exploit-writing tests of 50 LLMs.

Also, US Sanctions North Korean IT Worker Scammers and More Paraguay Hacks
This week, McDonald's password mishap, North Korean IT worker sanctions, a wormable Microsoft flaw, Qantas update. Monzo fined, Flutter data breach and CyberTeam again targeted Paraguay. Anatsa Trojan reappeared, DoNot targeted a European ministry. Academics sneaked prompt injections into papers.

Abnormal AI CEO Evan Reiser on Behavioral Anomalies, Personalized Phishing Training
Abnormal AI is rolling out behavior-driven AI tools that automate phishing awareness and data reporting. Co-founder and CEO Evan Reiser says the platform reflects a shift away from generic campaigns and manual dashboards toward contextual, real-time defense.

Also: Winkle Abduction Sentencing and Crypto Theft Rising
This week, uncovering 40 malicious crypto Firefox extensions, three sentenced in a Belgium court for crypto kidnapping, the rise of crypto theft. The U.S. Secret Service is a huge crypto custodian, and prosecutors claw back funds pilfered by a fake presidential inaugural committee.

As healthcare providers and their vendors develop and implement agentic artificial intelligence and other AI tools, they need to throughly understand data privacy risks under HIPAA and other laws, said attorney Jordan Cohen of law firm Akerman LLP.

AI Models Mostly Fail in Full Track of Vulnerability Research to Exploit
The rise of code-illiterate but AI-enabled script kiddies able to wreak havoc by weaponizing software vulnerabilities into automated exploits, thanks to expert-level assistance from large language models, remains but a future possibility, based on exploit-writing tests of 50 LLMs.

Also, US Sanctions North Korean IT Worker Scammers and More Paraguay Hacks
This week, McDonald's password mishap, North Korean IT worker sanctions, a wormable Microsoft flaw, Qantas update. Monzo fined, Flutter data breach and CyberTeam again targeted Paraguay. Anatsa Trojan reappeared, DoNot targeted a European ministry. Academics sneaked prompt injections into papers.

Abnormal AI CEO Evan Reiser on Behavioral Anomalies, Personalized Phishing Training
Abnormal AI is rolling out behavior-driven AI tools that automate phishing awareness and data reporting. Co-founder and CEO Evan Reiser says the platform reflects a shift away from generic campaigns and manual dashboards toward contextual, real-time defense.

Also: Winkle Abduction Sentencing and Crypto Theft Rising
This week, uncovering 40 malicious crypto Firefox extensions, three sentenced in a Belgium court for crypto kidnapping, the rise of crypto theft. The U.S. Secret Service is a huge crypto custodian, and prosecutors claw back funds pilfered by a fake presidential inaugural committee.

HackerNews 编译，转载请注明出处： 俄罗斯职业篮球运动员丹尼尔·卡萨特金（Daniil Kasatkin）因涉嫌担任勒索软件团伙谈判代表，应美国要求于法国被捕。 卡萨特金是一名俄罗斯篮球运动员，2019年返回俄罗斯前曾短暂效力于宾夕法尼亚州立大学NCAA篮球队。在莫斯科MBA-MAI俱乐部效力的四个赛季中，他出战172场比赛后离队。 据法国媒体报道，卡萨特金在与未婚妻飞抵法国后，于6月21日在巴黎戴高乐机场被捕。此次逮捕基于美国发出的国际通缉令，指控其在勒索软件团伙中担任谈判者角色。 目前卡萨特金已被羁押，美国正寻求将其引渡以面临“共谋实施计算机欺诈”及“计算机欺诈共谋”罪名指控。 其律师坚称卡萨特金无罪，辩称涉案行为与其购买的二手电脑有关。“他买了一台二手电脑，完全是无辜的，他对此感到震惊，”律师弗雷德里克·贝洛特向媒体表示，“他完全不懂电脑，连应用程序都不会安装。那台电脑他从未动过，要么是被黑客入侵，要么是卖家冒充他人身份进行操作。” 虽然勒索软件团伙名称未公开，但报道称该团伙在2020至2022年间攻击超过900家企业，其中包括两家联邦机构。美国司法部过往对知名勒索软件团伙Conti的描述高度吻合——该团伙作为Ryuk的继任者在2020年出现，并于2022年因数据泄露事件关闭。不过此前Conti未曝光过入侵联邦机构的记录，尽管其攻击过州政府系统。 上月，法国警方还逮捕了四名涉嫌运营BreachForums黑客论坛的人员，其中包括使用IntelBroker和ShinyHunters化名的黑客。       消息来源： bleepingcomputer； 本文由 HackerNews.cc 翻译整理，封面来源于网络； 转载请注明“转自 HackerNews.cc”并附上原文

文章描述了错误代码521的问题及其解决方法。

An attack on the Visual Studio Code extension known as Ethcode has compromised the security of more than 6,000 developers worldwide. The incident stemmed from the insertion of malicious code into this widely used...

The post Ethcode Compromised: Over 6,000 Devs Hit by Malicious VS Code Extension appeared first on Penetration Testing Tools.

Ubuntu 24.10版本已结束生命周期，不再提供更新和支持。建议用户升级至Ubuntu 25.04版本以获得更好的体验和持续支持。