Aggregator

The organization behind Team USA's Olympic/Paralympic fencing teams has automated identity verification to handle growing membership, cutting manual review time while ensuring athletes compete in the correct categories.

Google on Thursday announced that it fixed a whopping 1,072 security bugs in Chrome versions 149 and 150, surpassing the total number of flaws the company fixed across the prior 23 milestones combined. Both versions were released last month. In its latest patch for Chrome 151, released Wednesday, the tech giant resolved 370 flaws, out of which 349 were reported by Google itself. Seven of the

Sandisk и SK Hynix предлагают заменить дефицитную память флешкой.

Anthropic 回溯审查 141,006 次网络安全评测，发现三起 Claude 越界攻击真实系统的事件。模型已能端到端完成侦察、入侵和横向移动；Mythos 5 甚至尝试获取资金，购买短信验证号码。

Google is expanding the use of artificial intelligence (AI) agents across the Chrome security lifecycle to identify source code weaknesses, test patches, and accelerate the delivery of security updates to users. The Chrome Security team stated that AI systems are now helping discover vulnerabilities across the broader Chromium codebase, rather than only assisting with limited […]

The post Google Uses AI Agents to Find and Fix 1,072 Chrome Security Vulnerabilities appeared first on Cyber Security News.

An AI-assisted audit found 29 flaws in GlobaLeaks, showing LLMs make large-scale code reviews faster, cheaper, and accessible. GlobaLeaks, a mature whistleblowing platform that had already undergone six independent professional audits over the past thirteen years, was subjected to an LLM-assisted security review that cost roughly USD 3,140 in API calls. The review identified 29 […]

A security investigation into inexpensive Android TV boxes led researchers to an ad fraud operation that had remained unnoticed for several years. Fuyao apps ecosystem (Source: Bitsight) According to Bitsight, the operation, named Fuyao, uses preinstalled Android apps, device identity spoofing, AI-generated websites, and residential proxy services to generate advertising revenue without device owners’ knowledge. “Fuyao’s business model operates under its ability to always identify where an ad lives on a website, spoof the device … More →

The post Criminals used AI and children’s coding software to build a multimillion-dollar ad fraud empire appeared first on Help Net Security.

2026年7月13日,波士顿联邦陪审团给马赫迪·萨迪吉定了三项罪。这案子本身不大——一个双重国籍工程师帮亲戚

周五了，我们聊点有意思的事，先祝大家过一个愉快的周末。

Claude maker Anthropic said its AI models escaped test environments and breached networks at three companies on the open internet.

XRP volatility drives faster crypto trading as AI tools gain traction, while phishing, exchange attacks and automation risks test digital asset safeguards.

本报告所有数据均源自公开来源信息（OSINT），包括美国智库报告（CSIS）、国防部预算文件、国防承包商财报会议、专业军事媒体报道及国会证词。五角大楼从未公布精确的拦截弹库存数据，因此所有数字均为合理估算区间。实际库存数可能与本报告估算值存在偏差。

A North Korean-linked cyber campaign is using fake macOS update screens to trick victims into installing malware. The operation targets cryptocurrency wallets, browser data, and developer credentials, turning a routine web search into a possible entry point for a serious compromise. The attack begins with a ClickFix-style lure that makes a browser page look like […]

The post North Korean EtherHiding Campaign Targets Crypto Wallets and Developer Credentials appeared first on Cyber Security News.

Claude вырвался из песочницы и взломал три компании.

An academic study has disclosed a "widespread class" of security vulnerabilities impacting 4G and 5G core networks that, if successfully exploited, could trigger denial-of-service (DoS) attacks and even session hijacking, allowing an attacker to seize control of a user's network session. The findings have been released by a group of researchers from Singapore's Nanyang Technological University

BlackTech has been linked to a newly examined Linux backdoor deployment against organizations in Japan, showing how a familiar remote-access tool can be reshaped for cyberespionage. The malware gives intruders a way to run commands, move files, and route traffic after they have already entered a network, raising the risk to internal systems and sensitive […]

The post BlackTech APT Deploys BlueShell Linux Backdoor Against Japanese Organizations appeared first on Cyber Security News.

Device code phishing - the abuse of the OAuth 2.0 device authorization grant to steal access tokens - has evolved from a niche red-team technique to an industrial-scale threat in under six months. Designed for input-constrained devices like smart TVs, printers, and so on, the device authorization login flow has been adopted by a wide range of apps and use-cases that it wasn't originally

Device code phishing - the abuse of the OAuth 2.0 device authorization grant to steal access tokens