Aggregator

数据作为数字经济时代的关键生产要素，其产权制度的构建与完善直接关系到国家创新活力和经济发展潜力。党的二十届三中全会《决定》明确提出“加快建立数据产权归属认定、市场交易、权益分配、利益保护制度”，为数据基础制度建设指明了方向。

3月19日，华为中国合作伙伴大会2026在深圳举行。大会以“因聚而升，融智有为”为主题，旨在通过“伙伴+华为”体系在战略、能力、价值的全面融合与协同，共筑数智化升级新引擎。

根据国家信息安全漏洞库（CNNVD）统计，近期共采集重要人工智能漏洞155个，CNNVD对这些漏洞进行了收录。本周人工智能类漏洞主要涵盖了OpenClaw、腾讯、HCL等多个厂商（项目）。CNNVD对其危害等级进行了评价，其中超危漏洞18个，高危漏洞56个，中危漏洞81个。

此次修法将关基安全保护的法律责任作为重点关切，通过体系化、梯度化的责任设计，切实推动运营者履行安全保护主体责任，并进一步完善网络产品和服务责任链条，全面提升关基供应链安全水平，充分彰显法治建设与时代发展协同适配的治理逻辑。

In our recent report, Beyond the Black Box, we found a striking gap: 80% of executives believe their organizations have strong security coverage for AI systems. Only about 40% of AppSec practitioners agree.

Related: AI moves mainstream

That’s not … (more…)

The post GUEST ESSAY: Executives trust AI security even as security teams confront blind spots, new risks first appeared on The Last Watchdog.

The post GUEST ESSAY: Executives trust AI security even as security teams confront blind spots, new risks appeared first on Security Boulevard.

A vulnerability was found in TotalSuite TotalContest Lite Plugin up to 2.9.1 on WordPress. It has been rated as problematic. The impacted element is an unknown function. This manipulation causes deserialization. This vulnerability is handled as CVE-2026-0677. The attack can be initiated remotely. There is not any exploit available.

A vulnerability was found in blakeblackshear frigate up to 0.16.x. It has been declared as critical. The affected element is an unknown function of the file /users/{username}/password of the component Password Reset Handler. The manipulation results in improper authentication. This vulnerability is known as CVE-2026-33124. It is possible to launch the attack remotely. No exploit is available. It is recommended to upgrade the affected component.

A vulnerability was found in blakeblackshear frigate up to 0.16.2. It has been classified as critical. Impacted is an unknown function. The manipulation leads to improper authorization. This vulnerability is traded as CVE-2026-33125. It is possible to initiate the attack remotely. There is no exploit available. Upgrading the affected component is recommended.

A vulnerability was found in PinchTab up to 0.8.2 and classified as critical. This issue affects the function validateDownloadURL of the file /download of the component Internal Service. Executing a manipulation can lead to server-side request forgery. This vulnerability appears as CVE-2026-33081. The attack may be performed from remote. There is no available exploit. It is suggested to upgrade the affected component.

A vulnerability has been found in h3js h3 up to 1.15.5 and classified as problematic. This vulnerability affects the function formatEventStreamMessage of the component SSE Message Handler. Performing a manipulation of the argument id/event/data/comment results in crlf injection. This vulnerability is reported as CVE-2026-33128. The attack is possible to be carried out remotely. No exploit exists. The affected component should be upgraded.

关注高级攻防对抗技术热点，研究对手技术进行高级威胁模拟，研判攻击安全发展方向。

A vulnerability, which was classified as problematic, was found in py-pdf pypdf up to 6.9.0. This affects an unknown part of the component PDF Handler. Such manipulation leads to resource consumption. This vulnerability is documented as CVE-2026-33123. The attack can be executed remotely. There is not any exploit available. You should upgrade the affected component.

What you do – and how fast – after an account is compromised often matters more than it may seem

Artificial Intelligence (AI) is changing how individuals and organizations conduct many activities, including how cybercriminals carry out phishing attacks and iterate on malware. Now, cybercriminals are using AI to generate personalized phishing emails, deepfakes and malware that evade traditional detection by impersonating normal user activity and bypassing legacy security models. As a result,

从0到1开发x32/x64Dbg插件，搞定高版本VMP

后门可窃取短信、录音、钥匙串、健康数据。苹果已修复，请速更至iOS 26.3或开启锁定模式。

文末投递简历

看雪论坛作者ID：执着的猫

We’re thrilled to announce that ANY.RUN has once again been recognized in IT-Harvest’s 2026 Cyber 150, a list of the fastest-growing cybersecurity companies. Receiving this recognition for the second year in a row makes this moment especially meaningful and reflects the strong progress our company made over the past year.  It also points to a broader shift in the market. […]

The post ANY.RUN Enters IT-Harvest’s 2026 Cyber 150 for Fast Growth and Industry Impact  appeared first on ANY.RUN's Cybersecurity Blog.

根据发表在《PNAS Nexus》上的一项考古学研究，北美居民大约是在 1400 年前开始用弓箭取代飞镖和投矛器。在南部区域弓箭几乎是立即被接受，北部区域的接受度比较慢，一开始是将弓箭作为现有工具的补充，花了千年时间才淘汰飞镖和投矛器。弓箭在精度、射程、速度、射击频率等方面都强于飞镖和投矛器，但制造和维护成本更高，且需要双手操作，无法同时持盾，但其优点大于缺点而获得广泛使用。弓箭由有机材料制成，没有石器、骨器或金属工具那样容易保存，因此确定其出现时间和流行时间比较困难。