Aggregator

关键词挖矿有人在Steam论坛发"修复教程"，复制粘贴那一刻，你的电脑就沦陷了。

关键词苹果今天早上，苹果用户集体懵了。7月27日，苹果公司系统状态页面显示，多项核心服务出现故障，大量用户受到影响。

In this interview with Help Net Security, Mary Rose Martinez, CISO at Marathon Petroleum, talks about what happens to security when automation reaches deep into refineries, pipelines, and terminals. She explains why the old idea of air-gapped operational technology has faded, how the Purdue model helps her team apply controls without stopping production, and where supply chain risk sits when vendors and their vendors hold the keys. She also covers cross-skilling the workforce and working … More →

The post Marathon Petroleum’s CISO on OT security automation, supply chain risk appeared first on Help Net Security.

A new report links 148 ransomware attacks to Italian organizations in H1 2026, with manufacturing the most targeted sector. Six months, 148 confirmed ransomware claims against Italian targets, and one sector taking the brunt of it. That’s the headline number from a new semi-annual tracker compiled by ransomNews under its RedACT project, which pulls together […]

在内存天价的时代，华为据报道与昇维旭（SwaySure）等合作建造一座 12 英寸内存芯片工厂。昇维旭被认为是一家华为关联企业，该公司生产的内存芯片不是面向消费者而是面向企业的 HBM。另外中国最大的内存芯片制造商长鑫本周一上市，立即成为中国市值最高的上市公司，其市值达到了 3.68 万亿元（约 5434.1 亿美元），超过了英特尔的 4640 亿美元。

An AI coding agent opens a terminal, reads a config file, and finds a live cloud key sitting in plaintext. It runs with the permissions of the person who launched it. Every file that person can read, the agent reads. Every credential in the environment, the agent can use. That reach is where the damage starts. A prompt injection, a mistyped command, or a hallucinated path points that access at the company’s own credentials and … More →

The post Nono: Open-source sandbox for AI agents appeared first on Help Net Security.

A vulnerability was found in Apple macOS. It has been classified as critical. This vulnerability affects unknown code of the component MediaToolbox Framework. Performing a manipulation results in memory corruption. This vulnerability is known as CVE-2025-43210. Remote exploitation of the attack is possible. No exploit is available. Upgrading the affected component is recommended.

A vulnerability was found in Apple macOS up to 15.0. It has been declared as critical. This impacts an unknown function. The manipulation results in permission issues. This vulnerability is known as CVE-2024-44219. It is possible to launch the attack remotely. No exploit is available. It is recommended to upgrade the affected component.

A vulnerability was found in Apple macOS up to 15.0. It has been rated as critical. Affected is an unknown function of the component App. This manipulation causes permission issues. This vulnerability is handled as CVE-2024-44250. It is possible to launch the attack on the local host. There is not any exploit available. Upgrading the affected component is advised.

A vulnerability categorized as problematic has been discovered in Apple iOS and iPadOS. Affected by this vulnerability is an unknown functionality of the component Media File Handler. Such manipulation leads to out-of-bounds read. This vulnerability is uniquely identified as CVE-2025-43210. The attack can be launched remotely. No exploit exists. It is advisable to upgrade the affected component.

A vulnerability identified as problematic has been detected in Apple tvOS. Affected by this issue is some unknown functionality of the component Media File Handler. Performing a manipulation results in out-of-bounds read. This vulnerability was named CVE-2025-43210. The attack may be initiated remotely. There is no available exploit. You should upgrade the affected component.

A vulnerability labeled as problematic has been found in Apple visionOS. This affects an unknown part of the component Media File Handler. Executing a manipulation can lead to out-of-bounds read. The identification of this vulnerability is CVE-2025-43210. The attack may be launched remotely. There is no exploit available. The affected component should be upgraded.

A vulnerability marked as problematic has been reported in Apple watchOS. This vulnerability affects unknown code of the component Media File Handler. The manipulation leads to out-of-bounds read. This vulnerability is referenced as CVE-2025-43210. Remote exploitation of the attack is possible. No exploit is available. It is suggested to upgrade the affected component.

A vulnerability described as problematic has been identified in Apple macOS up to 15.0. This issue affects some unknown processing of the component Keyboard Event Handler. The manipulation results in state issue. This vulnerability is identified as CVE-2024-44286. The attack can be executed remotely. There is not any exploit available. Upgrading the affected component is recommended.

A vulnerability classified as critical has been found in Apple macOS up to 15.0. Impacted is an unknown function of the component App. This manipulation causes improper access controls. This vulnerability is tracked as CVE-2024-44303. The attack is possible to be carried out remotely. No exploit exists. It is recommended to upgrade the affected component.

A vulnerability has been found in Apple macOS up to 15.0 and classified as critical. This impacts an unknown function of the component App. The manipulation leads to permission issues. This vulnerability is documented as CVE-2024-40858. The attack needs to be performed locally. There is not any exploit available. The affected component should be upgraded.

A vulnerability was found in Apple macOS up to 13.7.6/14.7.6/15.5. It has been declared as problematic. Affected by this issue is some unknown functionality. Such manipulation leads to type confusion. This vulnerability is traded as CVE-2025-43236. An attack has to be approached locally. There is no exploit available. It is recommended to upgrade the affected component.

Хотели бы себе такой экологичный костюмчик?

In this Help Net Security video, Joel Moses, VP, Strategic Engineering at F5, explains how attackers use identity instead of breaking through it. He walks through MFA fatigue, session token theft, and consent given to malicious applications, using the 2022 Uber breach as an example. He also covers how cloud and on-premises trust relationships give attackers a path between environments. Moses suggests number matching, FIDO2 keys, periodic reviews of third party application access, and watching … More →

The post What the identity attack surface looks like when trust becomes the target appeared first on Help Net Security.

A vulnerability was found in Linux Kernel up to 6.19.8 and classified as critical. This impacts the function cmpxchg. The manipulation results in use after free. This vulnerability is cataloged as CVE-2026-43370. The attack must originate from the local network. There is no exploit available. It is suggested to upgrade the affected component.