Aggregator

关键词漏洞全球数十亿用户依赖的Redis，刚刚爆出了一个高危0day。

关键词AI以前黑客靠技术，现在黑客靠AI。当网络攻击遇上人工智能，一切都变了。

关键词漏洞你的车，可能正在被别人"遥控"。2026年7月24日，安全研究人员披露了一个足以载入汽车安全史册的漏洞——影响数百万辆汽车的KARR报警系统，存在严重安全缺陷。

Web3 钓鱼攻击正从链接诱导演变为完整攻击链，安全防护需从资金安全延伸至用户终端与操作环境。

欧盟根据其内容审核规则手册升级了对短视频平台TikTok的调查，指责该社交网络未能保护青少年用户的安全和隐私。欧盟委员会周五公布了针对这家字节跳动旗下平台的初步调查结果，调查依据数字服务法。欧盟委员会

Golden Chickens, tracked as TAG-195 and also known as Venom Spider, has launched four new modular malware families designed to enhance credential theft, browser session hijacking, and post-exploitation flexibility. The newly identified families TinyEgg, ChonkyChicken, a modularized ChonkyChicken variant, and ChromEggscalator mark a clear architectural evolution in the group’s malware-as-a-service (MaaS) ecosystem, signaling a shift […]

The post Golden Chickens Launches Four Modular Malware Families to Steal Chrome Credentials and Hijack Browser Sessions appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Upbound Group сообщила об утечке данных клиентов и потере $13 млн из-за мошенничества.

A new academic study from Beacom College of Computer & Cyber Sciences has revealed that every automation script generated by leading AI models ChatGPT, Microsoft Copilot, and Google Gemini contained exploitable security vulnerabilities. As enterprises increasingly rely on AI tools to accelerate development workflows, these findings highlight serious risks associated with deploying unreviewed AI-generated code […]

The post Security Flaws Found in Every Script Generated by ChatGPT, Copilot, and Gemini appeared first on Cyber Security News.

当地时间7月23日上午，2026年国际数学家大会于美国费城正式开幕。大会现场揭晓了本年度菲尔兹奖四位获奖者名单，分别是邓煜、约翰·帕登、雅各布·齐默尔曼与王虹。据了解，雅各布·齐默尔曼此次能够斩获菲尔

Someone installed a popular AI assistant on a rented server, switched off the setting that makes it ask permission before running risky commands, and pointed it at Thailand's Ministry of Finance, which runs the country's treasury and tax collection. The agent then worked through the ministry's network on its own, checking hosts for ways to gain root access, hunting through file systems, and

Someone installed a popular AI assistant on a rented server, switched off the setting that makes it

A vulnerability was found in ESET Endpoint Security for macOS and ESET Cyber Security for macOS. It has been rated as very critical. Impacted is an unknown function. Performing a manipulation results in improper privilege management. This vulnerability was named CVE-2026-7483. The attack needs to be approached locally. There is no available exploit.

从战术到战略：美国专家分析人工智能如何突破网络行动的“三维制约”

黑客窃取数据伪造租赁合同从而白嫖商品

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

A vulnerability was found in FELIPE TOML::XS up to 0.05. It has been declared as critical. This issue affects the function from_toml. Such manipulation leads to uncontrolled recursion. This vulnerability is uniquely identified as CVE-2026-16634. The attack can be launched remotely. No exploit exists. It is recommended to upgrade the affected component.

A vulnerability was found in e4jvikwp VikBooking Hotel Booking Engine & PMS Plugin up to 1.8.13 on WordPress. It has been classified as problematic. This vulnerability affects unknown code. This manipulation of the argument vbfX causes cross site scripting. This vulnerability is handled as CVE-2026-15401. The attack can be initiated remotely. There is not any exploit available.