Aggregator

It’s a lot:According to information obtained by The Tech, MIT is spending over $3 million

The U.S. Justice Department has seized more than 1,000 websites and blocked 1,970 domains used to stream FIFA World Cup 2026 matches without authorization. [...]

检测业务是否受到此漏洞影响，请联系长亭应急服务团队！

Хакеры начали взламывать ServiceNow через критическую уязвимость без авторизации.

关键词木马你打开一个网站，弹出验证码："请勾选我不是机器人"。你勾选了，然后页面提示你按 Win+R，粘贴一段命令，按回车。

关键词僵尸网络，AI你以为部署了 AI 服务，配好了 API Key，就安全了？

关键词GPT这不是段子，是真实发生的事。OpenAI 的代码生成工具 GPT-5.6 Codex，在帮用户写代码时，把用户的家目录文件给删了。

在生成式 AI 时代，流行公民科学数据库如 iNaturalist 和 Macaulay Library 也免不了被 AI slop 入侵。研究人员在《自然》上报告，他们在记录野生动物物种的流行公民数据库内发现了数百张 AI 生成的虚假图像。问题的真实规模尚不清楚，因为有许多假图可能未被发现。文章作者 Alexander Lees 博士称他在 Facebook 上看到的野生动物照片基本上都是 AI 生成的。他指出公民科学数据库里彻头彻尾的假图还比较罕见，问题主要是照片上传者会用 AI 美化下图像，结果生成式 AI 给图像添加了不存在的内容。iNaturalist 上逾 6.1 亿张图像只有 1400 张被标记为可能使用 AI。iNaturalist 社区支持总监 Tony Iwane 认为大多数假图并非是恶意的，他同时呼吁用户保持警惕，因为信息的准确性至关重要。

Threat actors are actively exploiting CVE-2026-6875, a critical pre-authentication remote code execution vulnerability in the ServiceNow AI Platform. This vulnerability allows attackers to escape a restricted server-side script sandbox and execute code without valid credentials. Reports from Defused indicate observed exploitation activity targeting this flaw. Initially, ServiceNow’s advisory stated it was not aware of any […]

The post Hackers Exploit ServiceNow AI Platform Flaw to Gain Unauthenticated Remote Code Execution appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

JADEPUFFER has escalated from automated database extortion to purpose-built AI model destruction, deploying a custom Go ransomware dubbed ENCFORGE to encrypt and effectively wipe high‑value AI and ML artifacts across an entire stack. A missing‑authentication bug in the /api/v1/validate/code endpoint that enables unauthenticated arbitrary Python execution on the host. That initial operation chained reconnaissance, credential […]

The post JADEPUFFER Deploys ENCFORGE Ransomware Built to Destroy AI Models and Training Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

WordPress выпустил экстренные обновления 6.9.5 и 7.0.2 из-за критической уязвимости.

7月19日，推上的一名安全研究员声称，他发现了一个在fastjson 1.2.83版本中无需gadget的RCE漏洞。一时间激起千帆浪。Fastjson虽然已经停止维护1版本，但是

The Qilin ransomware gang is exploiting a critical PAN-OS GlobalProtect authentication bypass flaw to breach victims' networks, according to cybersecurity company Arctic Wolf. [...]

从人的动作、目标图像、真机数据，到分频控制与云端基础设施，具身智能正在进入新的阶段。