Aggregator

LeakNet claims it stole 11TB of NYC Health + Hospitals data containing sensitive medical, financial and biometric records linked to more than 12 million people.

谷歌将其年龄验证API带给全球安卓开发者谷歌公司周三宣布，将在2026年底前向全球用户推出Play Signal API。该技术已在巴西上线，允许 Android 开发者识别其应用的低龄用户，以提供更

Check out GreyNoise's new Head of Adversary Engagement, Mark Mager, on why traditional detection engineering can't keep pace with CVE growth — and the agentic pipeline replacing it.

交通基础设施数智升级

TrendAI joins Nvidia as an inaugural partner in the Open Secure AI Alliance, advancing open models, harnesses, and research to strengthen cyber defense.

TrendAI joins Nvidia as an inaugural partner in the Open Secure AI Alliance, advancing open models, harnesses, and research to strengthen cyber defense.

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

The Russian state-sponsored hacking group Laundry Bear, also known as Void Blizzard, is exploiting an Exchange Outlook Web Access vulnerability in email campaigns to deliver a sophisticated backdoor called OWAReaper. [...]

Since 2006, Dark Reading has been at the forefront of covering cybersecurity. The more things change, the more they stay the same.

Claude is down for some users, with Anthropic confirming elevated errors across multiple AI models. The disruption is causing requests to fail with a "529 Overloaded" message, including in Claude and tools that rely on its API. [...]

Cisco is warning that a high-severity Secure Firewall Management Center (FMC) static credential vulnerability, tracked as CVE-2026-20316, was actively exploited in zero-day attacks to gain unauthorized access to vulnerable devices. [...]

These are the top threats you should know about this week.

Claude Mythos found new flaws in HAWK and reduced AES, proving AI can autonomously advance cryptography research. Anthropic published two cryptographic research results achieved by Claude Mythos Preview working mostly autonomously: an improved attack on HAWK, a post-quantum digital signature scheme currently under NIST review, and a 200 to 800 times faster attack on a […]

Amazon's threat intelligence team traced domain records from the open-source software hack to a smaller, earlier compromise by the same North Korean group.

The post A little-known npm package was North Korea’s warm-up act for the axios hack appeared first on CyberScoop.

A vulnerability classified as problematic has been found in pydantic pydantic-ai up to 1.105.0/2.0.0b5. Affected by this vulnerability is an unknown functionality of the component UI adapter. Performing a manipulation results in path traversal. This vulnerability is known as CVE-2026-54249. Remote exploitation of the attack is possible. No exploit is available. It is recommended to upgrade the affected component.

Popular telehealth provider Hims & Hers "shared consumers’ sensitive health information with third-party advertising platforms such as Meta and Snap despite promising to protect patient privacy," the federal government alleges.

速修复

速修复