Aggregator

ISC.AI大会定调“ALL IN AGENT”；安芯网盾推AI SOC平台；厂商加速布局AI安全与生态合作。

英国科学家发现，超加工饮食对减重和降低心血管代谢疾病风险的效果可能不如最少加工的饮食，即使这两种饮食都遵循相同的国家饮食指南。研究结果基于一项对英国 55 名成年人开展的社群水平的临床试验，揭示了在整体营养构成之外，食品加工程度对特定健康结局的可能影响。全球超加工食物消耗量在近几十年里快速增加，而肥胖症以及2型糖尿病和心血管疾病这类慢性病的发病率也在同期上升。研究人员开展了一项随机交叉试验，比较了以超加工食品为主和以最少加工食品为主的饮食，两种饮食结构都遵循了英国《健康饮食指南》——一组促进健康均衡营养的国家饮食建议。试验中的 55 名成人或接受预制的超加工食品，如早餐谷物或即食千层意面；或接受预制的最少加工食品，如隔夜燕麦或自制肉酱意面，这些食品在 8 周内分别配送到家。休息 4 周后，受试者换成另一种饮食再继续 8 周，从而能在受试者本人身上比较超加工食品和最少加工食品在 6 个月期间的影响。50 名受试者至少完成了一种饮食。研究者发现，遵循英国《健康饮食指南》的两种饮食都能在 8 周内显著减重。不过，最少加工饮食的平均减重量为 2%，而超加工饮食只有 1%。除了减重，最少加工饮食能更有效地改善与心血管代谢健康指标相关的身体成分，如降低脂肪总量、内脏脂肪和甘油三酯水平，但超加工饮食后的低密度脂蛋白胆固醇更低。

Вы всё сделали правильно, именно поэтому кампания сработала.

SonicWall probes possible new zero-day after spike in Akira ransomware attacks on Gen 7 firewalls with SSLVPN enabled. SonicWall is investigating a potential new zero-day after a surge in Akira ransomware attacks targeting Gen 7 firewalls with SSLVPN enabled. The company is working to determine if the incidents stem from an existing flaw or a […]

Cifas noted a record number of filings in its National Fraud Database for the first half of 2025

Detect and prevent malicious software and viruses on your computer or laptop.

A vulnerability, which was classified as problematic, was found in libav up to 12.3. This affects the function ff_seek_frame_binary of the file /libavformat/utils.c of the component MPEG File Parser. The manipulation leads to null pointer dereference. This vulnerability only affects products that are no longer supported by the maintainer. This vulnerability is uniquely identified as CVE-2025-8586. It is possible to launch the attack on the local host. Furthermore, there is an exploit available. The bug was initially reported by the researcher to the wrong project.

A vulnerability, which was classified as critical, has been found in libav up to 12.3. Affected by this issue is the function main of the file /avtools/avconv.c of the component DSS File Demuxer. The manipulation leads to double free. This vulnerability only affects products that are no longer supported by the maintainer. This vulnerability is handled as CVE-2025-8585. Attacking locally is a requirement. Furthermore, there is an exploit available. The bug was initially reported by the researcher to the wrong project.

A vulnerability classified as problematic was found in libav up to 12.3. Affected by this vulnerability is the function av_buffer_unref of the file libavutil/buffer.c of the component AVI File Parser. The manipulation leads to null pointer dereference. This vulnerability only affects products that are no longer supported by the maintainer. This vulnerability is known as CVE-2025-8584. Local access is required to approach this attack. Furthermore, there is an exploit available. The bug was initially reported by the researcher to the wrong project.

Threat actors are embracing ClickFix, ransomware gangs are turning on each other – toppling even the leaders – and law enforcement is disrupting one infostealer after another

С 1 августа блокируют не только рекламу, но и коды подтверждения.

Submit #621826 / VDB-318819

Submit #621825 / VDB-318818

Submit #621824 / VDB-318817

虚假宣称其检测设备符合政府网络安全标准

陪审团上周裁决特斯拉对一起牵涉到 Autopilot 的车祸过失死亡事件负有部分责任。庭审记录显示，特斯拉试图将所有责任都归罪于司机，主动隐瞒 Autopilot 在事故前后表现的关键证据。在车祸发生三分钟内，特斯拉汽车将碰撞快照（collision snapshot）——视频、CAN‑bus streams、EDR 数据等——上传到特斯拉公司的服务器上，然后删除了本地拷贝，使得特斯拉公司成为唯一一个能访问关键证据的实体。警方在多年之后才让特斯拉承认碰撞快照的存在。专家通过从车载电脑上取证恢复数据确认特斯拉一直拥有该“碰撞快照”。而特斯拉一直宣称快照数据并不存在。

A vulnerability classified as critical has been found in Draeger ICMHelper up to 1.4.0.1. Affected is an unknown function. The manipulation leads to missing authorization. This vulnerability is traded as CVE-2025-41698. An attack has to be approached locally. There is no exploit available.

A vulnerability was found in Draeger ICMHelper up to 1.4.0.1. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to use of hard-coded cryptographic key . The identification of this vulnerability is CVE-2025-2810. The attack needs to be approached locally. There is no exploit available.

French luxury fashion house Chanel has become the latest victim in a sophisticated cybercrime campaign targeting major corporations through their Salesforce customer relationship management systems. The company confirmed on July 25, 2025, that unauthorized threat actors had breached a database containing personal information of U.S. customers who contacted their client care center. The breach exposed […]

The post Fashion Giant Chanel Hacked in Wave of Salesforce Attacks appeared first on Cyber Security News.