Aggregator

Cybersecurity teams have confronted a rising threat from a novel “EDR killer” payload in recent months, commonly referred to as AVKiller, which has been observed disabling endpoint defenses to facilitate the deployment of ransomware. First detected in mid-2024, this tool leverages the HeartCrypt packer-as-a-service to obscure its true functionality and slip past traditional static signature […]

The post HeartCrypt-Packed EDR Killer Tools ‘AVKiller’ Actively Used in Ransomware Attacks appeared first on Cyber Security News.

SonicWall has revealed that the recent spike in activity targeting its Gen 7 and newer firewalls with SSL VPN enabled is related to an older, now-patched bug and password reuse. "We now have high confidence that the recent SSL VPN activity is not connected to a zero-day vulnerability," the company said. "Instead, there is a significant correlation with threat activity related to CVE-2024-40766."

要做好AI大模型应用的安全，需要懂AI、懂安全、在AI业务上进行大量实践和AI安全语料的长期积累。

环境异常需验证后继续访问。

Flo Health未经用户同意分享女性生殖健康数据至Meta等公司。陪审团裁定Meta故意获取敏感信息。案例凸显隐私保护重要性，尤其在美国堕胎权受限后。

ACE联盟与Rare Breed TV达成协议，该非法IPTV服务将永久关闭并支付赔偿金。尽管如此，该网站仍在线提供订阅服务。

The Alliance for Creativity and Entertainment (ACE) announced the shutdown of Rare Breed TV, a major illegal IPTV service provider, after reaching a financial settlement with its operators. [...]

Nvidia Corporation has issued a strong statement asserting that its graphics processing units (GPUs) contain no backdoors, kill switches, or spyware, directly addressing growing concerns from policymakers about potential hardware-based control mechanisms.  The semiconductor giant’s declaration comes as some industry observers and government officials propose requiring mandatory remote disable capabilities in critical computing infrastructure, a […]

The post Nvidia Says No Backdoors, No Kill Switches, and No Spyware in its Chips appeared first on Cyber Security News.

速修复

速修复

Контейнер заговорил от имени системы — и облако поверило.

Ukraine’s CERT-UA warns of phishing attacks by UAC-0099 targeting defense sectors, using malware like MATCHBOIL, MATCHWOK, and DRAGSTARE. Ukraine’s CERT-UA warns of phishing attacks by threat actor UAC-0099 targeting government and defense sectors, delivering malware like MATCHBOIL and DRAGSTARE. The National Cyber Incident, Cyber Attack, and Cyber Threat Response Team CERT-UA investigated multiple attacks against […]

乌克兰CERT-UA警告称，威胁行为者UAC-0099针对乌克兰国防部门发动钓鱼攻击，利用恶意软件如MATCHBOIL、MATCHWOK和DRAGSTARE进行入侵。攻击通过伪装成“法院传票”的钓鱼邮件传播，最终激活恶意软件并窃取敏感信息。

一份代码审计实战指南

本文探讨了AI在创意设计中的应用挑战，包括提示系统的限制和视觉意图表达的困难。提出通过可探索画廊、草图和用户生成图像等多模态方法解决这些问题，并强调将人类设计知识整合到AI工具中以增强控制和所有权。未来应注重人机协作而非完全自动化。

DarkCloud Stealer采用新方法传播和混淆技术，涉及ConfuserEx保护和VB6编写最终payload。攻击链通过钓鱼邮件中的压缩包启动，并利用多层加密和混淆技术投放恶意软件。Palo Alto Networks提供多种防护产品以应对这些威胁。

HTTP/1.1 现致命漏洞，数百万网站面临风险

看雪论坛作者ID：Gushang

8月15日12:00开赛，丰厚大奖等你拿