Aggregator

反向图片搜索引擎反向图片搜索（Reverse Image Search）是图片地理定位的第一道关卡。

DARPA在2025年8月宣布了竞赛的三名获胜者后，为使用其AI系统发现并修复关键重要软件中漏洞的决赛选手设立了140万美元的奖金池。

A supply chain attack targeting the Laravel Lang localization packages has exposed developers to a sophisticated credential-stealing malware campaign after attackers abused GitHub version tags to distribute malicious code through Composer packages. [...]

A ransomware group is claiming to have collected data allegedly belonging to Mecanizados y Montajes Aeronáuticos, a Spanish aerospace manufacturing company serving major Tier 1 and OEM programs.

Bumblebee позволяет обнаруживать вредоносные пакеты и расширения без запуска стороннего кода.

Исследователи ВОЗ оценили 30 факторов риска и показали, где профилактика может спасти больше всего жизней.

A threat actor on an underground forum is claiming to leak databases allegedly belonging to Avea Vacances, a French organization offering holiday camps and educational stays for children and teenagers.

Обычные роутеры могут распознавать человека по отражениям радиосигнала от тела.

A threat actor on an underground forum is claiming to have leaked a database allegedly belonging to Optic 2000, a French optical retail and eyewear brand.

Атакующим всё чаще помогает не маскировка, а чужая привычка ничего не замечать.

GitHub has rolled out new controls for npm to improve the security of the software supply chain, giving maintainers the ability to explicitly approve a release prior to the packages becoming publicly available for installation. Called staged publishing, the feature is now generally available on npm. It mandates that a human maintainer pass a two-factor authentication (2FA) challenge to approve

Attackers began exploiting Drupal SQL injection flaw CVE-2026-9082 within 48 hours of patch release. Drupal issued a highly critical security patch on May 20 for CVE-2026-9082, a SQL injection vulnerability that allows unauthenticated attackers to compromise sites running PostgreSQL databases. The project maintainers warned ahead of the release that exploits could surface within hours or […]

Обычная авторизация и привычные запросы превращаются в удобную ширму для наблюдения.

A new "coordinated" supply chain attack campaign has impacted eight packages on Packagist including malicious code designed to run a Linux binary retrieved from a GitHub Releases URL. "Although the affected packages were all Composer packages, the malicious code was not added to composer.json," Socket said. "Instead, it was inserted into package.json, targeting projects that ship JavaScript

A threat actor on an underground forum is claiming to have compromised VIPER, an integrated management platform allegedly used by Chilean fire departments.

我们不能希望一早晨把对群众有利的事情都办完

今日暂未更新资讯~
更多最新文章，请访问SecWiki