Aggregator

当 Rebecca Green 去看泌尿科医生时，医生询问是否可以用 AI 记录就诊经历，她同意了。但这一决定给她带来了巨大压力。因为 AI 抄写员捏造了她服用迷幻蘑菇的经历，她说自己从未

Шпионская кампания растянулась на 80 стран, прежде чем её остановил один разрезанный провод.

关键词漏洞拥有数百万安装量的知名 WordPress 建站插件 Elementor Pro 今日被安全研究机构

关键词漏洞美国网络安全与基础设施安全局（CISA）发布紧急安全通告，正式将多项近期被黑客团伙在野外活跃利用的严

关键词扩展Mozilla Firefox 扩展生态今日曝出大规模供应链钓鱼欺诈事件。

A US government advisory warned that attackers are deploying AI-generated exploitation scripts against exposed Siemens S7 Series PLCs

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

C и C++ получили соперника, которого слишком долго считали нишевым.

Every enterprise wants the upside of AI — faster workflows, sharper decisions, leaner teams

Red Hat has disclosed CVE-2026-66794, an important-severity server-side request forgery (SSRF) vulnerability in the cluster-proxy-addon component of the Multicluster Engine for Kubernetes. This flaw has a CVSS v3.1 score of 9.3. It could allow an unauthenticated remote attacker to use a publicly accessible route to access otherwise isolated services across managed clusters. Published on August […]

The post Red Hat Kubernetes Flaw Lets Unauthenticated Attackers Access Internal Cluster Services appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A malicious executable masquerading as a Google Gemini installer was used to deliver the Vidar infostealer on a company network in the EMEA region, according to Darktrace researchers who investigated the incident. “During the initial analysis, it was noted that the top search result for the suspicious filename associated pointed to a file hosted on Google Colab, a cloud-based Jupyter notebook platform, commonly used by developers, researchers, and data scientists to run code and machine … More →

The post Fake Gemini installer delivers Vidar infostealer via Google Colab lure appeared first on Help Net Security.

美国商品期货交易委员会（CFTC）周三宣布，正就算力衍生品合约征求公众意见，因为人工智能的蓬勃发展推动了与计算能力相关的新型市场产品的需求。此举是衍生品监管机构制定市场规则的初步举措，这些规则将有助于

Malware / Mobile SecurityCybersecurity researchers have shed light on an updated version of ToxicP

Cybersecurity researchers have shed light on an updated version of ToxicPanda (aka TgToxic) that comes with "significant enhancements," including a set of 167 remote commands and expands its targeting footprint globally. Zimperium zLabs, in a Wednesday report, said the Android malware also features a PIN harvesting workflow targeting more than 140 banking and cryptocurrency applications.

Splunk has released a security hardening update addressing 17 vulnerabilities across several applications and add-ons, including a critical remote code execution (RCE) flaw in the Splunk MCP Server app. The vulnerabilities encompass deserialization, access control, server-side request forgery (SSRF), denial-of-service, certificate validation, and information disclosure. Tracked as SVD-2026-0808 and published on August 19, 2026, the […]

The post Splunk Fixes 17 Vulnerabilities Including Critical MCP Server RCE appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Threat actors are increasingly abusing Microsoft 365 identity sessions rather than deploying malware, as shown in a cloud-only business email compromise (BEC). The attackers used an adversary-in-the-middle (AiTM) phishing kit to capture an authenticated Microsoft 365 session token, bypass multi-factor authentication, and quietly redirect vendor payments to attacker-controlled bank accounts. The lure contained a “View […]

The post Hackers Create Hidden Microsoft 365 Inbox Rules to Conceal Vendor Payment Fraud appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project