Aggregator

New releaseAug 20, 2026Self-hosted runtime control plane for AI agents. Observe or HITL approve or B

ClarityCheck обещал приватность, но стал источником самой уязвимой биометрии.

Huntress researcher explains how they were targeted by an elaborate and persistent phishing scam following Def Con

编注：很多读者都会好奇少数派的编辑们到底平时都「买了啥」。我们希望通过「编辑部的新玩意」介绍编辑部成员们最近在用的新奇产品，让他们自己来谈谈这些新玩意的使用体验究竟如何。内容声明：《新玩意》栏目如含有

最大的代码托管平台 GitHub 本周发生了一次持续了近八小时的宕机事故，再次在开发者中间引发了寻找替代平台的讨论。GitHub 今年频繁发生宕机事故，已促使多个知名开源项目宣布迁移出去。本周的宕机事故始于 8 月 17 日 13:28 UTC，直至 21:15 UTC 才完全解决——持续 7 小时 47 分钟的事故导致 Issues、Pull Requests、API、Actions 和 Copilot 等服务大量出错。GitHub 解释说，事故直接原因是位于公司美国中部数据中心的负载均衡器网络饱和，而自动扩容策略的配置错误，以及 Visual Studio Code 中一个导致流量放大 10 倍的重试 bug 等一系列连锁反应导致了此次事故持续了如此长时间。

最大的代码托管平台 GitHub 本周发生了一次持续了近八小时的宕机事故，再次在开发者中间引发了寻找替代平台的讨论。GitHub 今年频繁发生宕机事故，已促使多个知名开源项目宣布迁移出去。

OpenAI is previewing Private Safety Processing with early customers seeking greater certainty about how their data will be protected as AI systems become more capable. The system identifies patterns across related interactions while restricting OpenAI personnel from accessing the underlying content. The company plans to start rolling it out and publish a technical white paper in September. “No AI lab can address emerging risks alone. Private Safety Processing reflects that approach and is being shaped … More →

The post OpenAI previews privacy-focused system for detecting AI misuse appeared first on Help Net Security.

Threat actors are using AI to write exploit scripts targeting internet-exposed Siemens S7 Series programmable logic controllers (PLCs) used across water, energy, manufacturing, and other critical infrastructure sectors, according to US federal agencies. PLCs are the small industrial computers that open valves, run pumps, and control machinery in factories, water plants, and power stations. The NSA, CISA, FBI, Department of Energy (DOE), and Environmental Protection Agency (EPA) issued the joint advisory Wednesday, warning that “this … More →

The post US agencies warn of AI-powered attacks on Siemens industrial controllers appeared first on Help Net Security.

ThreatFabric's Mobile Threat Intelligence (MTI) Team has identified a new Android threat activ

Submit #880860 / VDB-393643

Hi! I’m Ryu from AMANEKU Studio.At the time of writing this, Shipaton has been underway for five day

Welcome to HackerNoon’s Writing Prompts! Would you like to take a stab at answering some of these qu

Программа киберударов США открыла частным подрядчикам доступ к уничтожению критических сетей за рубежом.

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds an MLflow vulnerability to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Progress LoadMaster vulnerability, tracked as CVE-2026-64849 (CVSS score of 9.3), to its Known Exploited Vulnerabilities (KEV) catalog. CVE-2026-64849 is a critical server-side request forgery (SSRF) vulnerability in MLflow, a […]

U.S. CISA adds an MLflow flaw to its Known Exploited Vulnerabilities catalog

Network-aware SSH router. Detects your active network or VPN and automatically selects the right h

error code: 521

Arkime is a large scale, open-source network analysis and packet capture system.Arkime aug

抖音近期低调上线了一个名为 “馋猫外卖” 的小游戏，它模拟点外卖，但游戏中的订单并不会真实产生和送达。用户支付的金额，会存进馋猫钱罐，随时可提现。馋猫外卖界面高度复刻美团外卖、淘宝闪购等主流外卖平台，