Aggregator

Block malicious npm and pip packages before they install. Defense in depth for the package

A team from the University of Massachusetts Amherst has shown that a contactless credit card keeps working past its printed expiration date, even after the cardholder gets a replacement. They named it the Zombie Card attack and presented the findings at USENIX Security 2026. The question behind the loophole “This work is motivated by documented patterns of improper expired card handling. Although issuers instruct cardholders to destroy expired cards after replacement, cardholders routinely underestimate this … More →

The post Researchers find a loophole that lets expired credit cards make unauthorized payments appeared first on Help Net Security.

大约十年前我写 PESignAnalyzer 时，最初的目标其实很直接：给定一个 Windows PE 文件，希望能够分析它的数字签名，知道这个文件是谁签署的、使用了什么算法、对应什么证书、证书链是什么，以及签名有没有时间戳。 真正开始实现以后，事情很快变得复杂起来。

第六届开源情报技术大会拟于2026年11月14日-15日在贵阳市贵州警察学院召开。

该文章代表了美国部分精英阶层面对中国崛起时的焦虑与遏制心态，其核心逻辑是将中国的发展视为威胁，将合作共赢的全球化视为零和博弈。这种观点既不符合经济学的比较优势原理，也不符合国际社会共同发展的根本利益。

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

中国在引入人形机器人的方面遥遥领先于全球。“世界机器人大会”在8月19日于中国北京开幕。虽然人形机器人可能尚需一定时间才能全面应用于工业，但运行数据的积累将成为用于提升技术水平的重要武器。据Count

Хотели анонимности — получили полицию в реальном времени внутри собственного телефона.

Back to updatesNew releaseAug 20, 2026Curated archive of presentation slides from Black Hat, Offensi

The window for responding to newly disclosed security flaws is getting shorter. Exploit code can appear quickly, exploitability can be tested soon after disclosure, and organizations have a growing number of weaknesses to sort through. Rapid7’s Q2 2026 Threat Landscape Report counted 8,539 high- and critical-severity vulnerability disclosures, twice the number recorded a year earlier. Source: Rapid7 The increase adds pressure to a patching process that requires teams to decide which problems deserve immediate attention. … More →

The post 8,539 reasons to rethink how vulnerabilities get patched appeared first on Help Net Security.

特朗普承认AI数据中心面临抵制：需要公关美化一下美国总统特朗普周三表示，数据中心或许需要树立一个新的形象。特朗普在周三一场聚焦加密货币的活动结束后对记者表示：“我想说，它们可能需要在公关方面多下点功夫

OWASP Nest is a comprehensive, community-first platform built to enhance collaboration and contrib

error code: 1003

error code: 1003

error code: 1003

error code: 1003