Aggregator
从“看见”到“研判”:看威努特AI安全态势感知如何落地实践
1 day 21 hours ago
从人工告警响应走向AI降噪研判
不打招呼直接锁死服务器:Sorry勒索病毒国内多点爆发,专挑中小企业下手
1 day 21 hours ago
环境异常 当前环境异常,完成验证后即可继续访问。 去验证
从“看见”到“研判”:看威努特AI安全态势感知如何落地实践
1 day 21 hours ago
环境异常 当前环境异常,完成验证后即可继续访问。 去验证
新型 PLC 编程软件架构演进、安全风险分析
1 day 21 hours ago
环境异常 当前环境异常,完成验证后即可继续访问。 去验证
【深度研判】美国海军确认弗吉尼亚级特种海底侦察潜艇配置,海底作战能力升级对我海底光缆及南海、西太平洋利益的影响
1 day 21 hours ago
美国海军8月3日的一份声明,信息量比它看起来大得多。原本计划全部加装"弗吉尼亚有效载荷模块"(VPM)的19
情报失败并非因为没有信息,而是因为没有提出正确问题
1 day 21 hours ago
2026年初,委内瑞拉总统马杜罗在总统府里跟一个外国高级代表团握手言欢,双方发表联合声明,重申"坚如磐石"的战
A question about arbitrary values in USB registry keys
1 day 22 hours ago
I was recently teaching the SANS FOR500 Windows Forensic Analysis class in Canberra and I was asked a question about how we track the connection times for USB devices in the registry: My answer at the time was, “they are arbitrary” but I thought I should look into it a little bit more, and I’m […]
Phill Moore
我的读书笔记:懒得想的时候,就靠定额
1 day 23 hours ago
有时候累得脑子不想转,靠刷短视频撑到半夜。后来我发现一件事:不结"今天干不干",反而能干更多。这篇读书笔记记下我的三个定额。
Rogue ransomware affiliate poses as recovery firm to steal payments
2 days ago
A suspected ransomware affiliate is posing as a ransomware recovery service called "Ransom Busters," contacting the victims before the attacks become public and claiming to be able to provide decryption keys and delete stolen data for a fee. [...]
Lawrence Abrams
Sakura Internet hack exposes data of up to 1.36 million accounts
2 days ago
Japanese cloud and data center service provider Sakura Internet disclosed that hackers accessed its sales management system, where customer contract and membership information is stored. [...]
Bill Toulas
No-Filter 'Kriminal' AI Platform Raises Cybercrime Concerns
2 days ago
The AI company officially forbids illicit use, while offering guardrail-free social engineering, offensive cybercrime, and OSINT scanning to anyone with a bit of cryptocurrency.
Alexander Culafi
Solana Asset Discovery Service Advertised on a Criminal Forum With Bulk Wallet Scanning
2 days 1 hour ago
A newly registered user posting as danbalan is advertising Checkermax, a subscription service that scans Solana wallet addresses for holdings not visible in a standard balance view.
Dark Web Informer
Healthtech firm CareCloud data breach impacts 3.7 million patients
2 days 1 hour ago
U.S. healthcare IT company CareCloud disclosed that the data breach incident it suffered earlier this year has impacted more than 3.7 million individuals. [...]
Bill Toulas
Submit #880113: liftoff-sr CIPster master before e8e9dba (reproduced on 1802525be27d33e19a9a83c163e331a1d13b1892) Out-of-bounds Read [Duplicate]
2 days 1 hour ago
Submit #880113 / VDB-379755
Carnegie
Agentic AI Presents New Insider Threat Model for Orgs
2 days 1 hour ago
Katie Moussouris of Luta Security talks with the Dark Reading News Desk about how enterprises will now need to monitor risks posed by their own agents in the wake of the recent Hugging Face attack.
Submit #880081: https://www.dedecms.com/ DeDeCMS v3 Unrestricted Upload [Accepted]
2 days 2 hours ago
Submit #880081 / VDB-393317
huliangjia
Submit #880056: code-projects.org Login Registration System In PHP 1.0 Information Disclosure [Accepted]
2 days 2 hours ago
Submit #880056 / VDB-393314
anubhav106
Cloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/Second
2 days 2 hours ago
Cybersecurity researchers have disclosed details of a remote Spectre attack against Cloudflare Workers that leaked a JSON Web Token (JWT) from a co-located Worker in the production environment at up to 12 bits per second, 360 times the rate of an earlier attack demonstrated in 2021.
The end-to-end experiment used an attacker Worker and a victim Worker controlled by the researchers,
The Hacker News
Identifying Agentic Automation with Behavioral Telemetry
2 days 2 hours ago
Learn how Akamai uses Masked Autoencoder Transformer models to detect sparse behavioral telemetry from autonomous AI browser agents, such as Comet.
Michael Sparkman & Daniel McAndrew