Aggregator

A ransomware attack has disrupted digital systems at Spain’s Port of Vigo, forcing authorities to disconnect parts of its network and temporarily manage cargo operations manually.

欧洲核子研究中心（CERN）的研究团队周二将 92 个反质子装进一个利用磁场捕获它们的特制瓶子中。一辆装载着这个瓶子的卡车，沿着位于瑞士日内瓦郊外的 CERN 实验室场地行驶了 30 分钟逾 8 公里最高时速 42 公里。 CERN 是世界上唯一能大量生产反质子的地方，实验的最终目标就是将反质子运送到一个不受实验噪声干扰的地方，从而对其开展更精准的研究。反物质是物质的等量、反状态，两者相遇会相互湮灭，完全转化为能量，这使得储存或移动反物质变得极其困难。CERN 通过让质子束撞击一块致密金属来制造反物质，然后利用电场和磁场减速并捕获由此产生的反质子。这一过程十分艰难，而且大多数粒子都在此过程中丢失了。研究团队开发了一种便携式粒子陷阱，使粒子永远不接触含物质的容器侧壁。这意味着要为超导磁体系统供电，并使用低温技术将其冷却至 4 开尔文（-269摄氏度）。瓶子必须保持在非常严格的真空环境中，以防止反物质在运输途中与任何游离的物质粒子相遇并湮灭，而且所有设备都必须能够承受卡车运输过程中产生的各种力。研究团队还安装了一个探测器，可以在驾驶座上检查反质子的情况。

Cloud Android phones fuel financial fraud, evading detection and enabling dropper accounts

Не просто модерация контента провалилась — вся платформа работала как ловушка.

Publicly accusing an entity of a cyberattack could have negative consequences that organizations should consider before taking the plunge.

Электронная почта давно перестала быть просто «коробкой для писем». Для большинства компаний это основной канал коммуникации и средство для заключения сделок. В то же время почта остается одной из главных точек входа для киберугроз. Как в светской беседе ценятся вежливость, надежность и уважение к собеседнику, так и в мире цифровой корреспонденции существует свой «джентльменский кодекс» — набор техник, без которых любой продукт для защиты почты выглядит неполноценным.

Alleged Breach of Alyna Exposes 18,000 Users With Passwords, GPS Coordinates, and Booking Data From Kuwaiti Laundry and Cleaning App

尽力过，不遗憾，同时不要拼命

2026年高级威胁预测 by ourren

更多最新文章，请访问SecWiki

Citrix has patched two NetScaler ADC and NetScaler Gateway vulnerabilities, one of which is very similar to the CitrixBleed and CitrixBleed2 flaws exploited in zero-day attacks in recent years. [...]

A vulnerability was found in cure53 DOMPurify up to 2.5.8/3.3.1. It has been declared as problematic. This affects an unknown part. Executing a manipulation can lead to cross site scripting. This vulnerability is tracked as CVE-2026-0540. The attack can be launched remotely. No exploit exists. It is recommended to upgrade the affected component.

A vulnerability labeled as problematic has been found in rustdesk-server-pro RustDesk Server Pro up to 1.7.5. This vulnerability affects unknown code of the component Address Book Sync API Module. Executing a manipulation can lead to cleartext transmission of sensitive information. This vulnerability appears as CVE-2026-30796. The attack may be performed from remote. There is no available exploit.

A vulnerability described as critical has been identified in rustdesk-client RustDesk Client up to 1.4.5. Impacted is the function Config::set_options of the file src/hbbs_http/sync.Rs of the component API Message Handler. The manipulation results in violation of secure design principles. This vulnerability is known as CVE-2026-30792. It is possible to launch the attack remotely. No exploit is available.