Aggregator

Что будет с трафиком россиян после отказа Fingrid обслуживать опоры ЛЭП.

Most organizations have incident response plans, security tools, and technical teams in place. Yet new research suggests that many still lack the coordination, visibility, and executive alignment needed to withstand a serious cyberattack. According to The State of Incident Response Readiness 2026, based on a survey of 600 senior IT security decision makers conducted by Vanson Bourne in January

Buying a new computer in 2026 is a unique experience. Rather than deal with incredibly high tech prices, more shoppers are opting for high-quality refurbished tech. This ASUS Chromebook CM30 refurb is in near-mint condition with a grade "A" rating, but it still only costs $144.97 (reg. $369.99) on sale. [...]

把 AI 视频生成变成一种轻量的社交动作。

既是交付最后端，也是输入信息的最前端。

Contrast Security has announced Contrast CVE Shield, designed to help organisations defend against the growing number of exploits generated with advanced AI models such as Claude Mythos. Contrast CVE Shield runs inside the application, where it detects, monitors and blocks attempts to exploit known vulnerabilities. Applications continue to function normally while security teams gain visibility into which vulnerabilities are present, which are being targeted and which exploitation attempts have been prevented. Using a runtime microsandbox … More →

The post Contrast CVE Shield aims to protect applications while security teams deploy patches appeared first on Help Net Security.

CISA, in collaboration with the Australian Signals Directorate’s Australian Cyber Security Center (ASD’s ACSC), the FBI, and international partners, has released new joint guidance titled “CI Fortify – Advice for Isolating Vital Systems.” This guidance aims to strengthen the resilience of critical infrastructure (CI) environments against escalating cyber threats. Published on July 28, 2026, it […]

The post CISA Urges Critical Infrastructure Operators to Isolate Vital OT Systems During Cyberattacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Свежий инцидент едва не оставил жителей без запасов питьевой воды.

OpenAI confirmed its AI exploited an Artifactory zero-day to escape its test environment before breaching Hugging Face. Two weeks after Hugging Face disclosed an autonomous AI system had breached it, the picture just got a lot more specific. OpenAI has published an update confirming the models responsible didn’t just wander into Hugging Face’s systems. They […]

关键词漏洞自托管 Git 平台 Gitea 修复了一个严重的远程代码执行漏洞，任何拥有仓库写权限的用户都可以通

关键词AIOpenAI 披露了一起令人震惊的安全事件：其 AI 模型在内部安全测试中自主突破了密封的测试环境，

关键词漏洞安全研究员近日披露了一个影响 Check Point 安全管理服务器的严重漏洞，攻击者无需任何凭据即

The Federal Security Service of the Russian Federation (FSB) on Wednesday said it charged Telegram founder Pavel Durov for allegedly facilitating terrorist activities and for failing to remove prohibited information in violation of Russian law. The principal security agency said the instant messaging platform "failed to remove numerous channels, chats, and bots on the platform that are

IBM Cost of a Data Breach Report warns that the global average cost of a data breach has reached a record high of $4.99m – and AI-backed attacks have played a role

Alphabet 上周公布的 4～6 月财报显示，净利润为 1121 亿美元，达到上年同期 4 倍。但其自由现金流 4～6 月为 -58 亿美元，自 2004 年上市以来首次转负。另一家巨头亚马逊和 Alphabet 一样，自由现金流正在急剧减少。原因被认为是加速投资 AI 数据中心。亚马逊 1～3 月的自由现金流同比减少 95%，降至 12 亿美元。如果 4～6 月的自由现金流转负，可能会加剧市场对 AI 过度投资的担忧。

随着 Google DeepMind 对曾使其跻身全球顶尖人工智能实验室之列的研究战略进行全面调整，AlphaFold 研发团队已被解散。AlphaFold 是一个能预测蛋白质结构的人工智能系统，曾经荣获诺贝尔奖。过去一年，AlphaFold 论文的多数原作者已被调任。DeepMind 证实，这些员工已在公司内部转岗，参与围绕 Gemini 大型语言模型开发的项目，以及酶设计、核聚变和基因组学等领域的工作。部分人则转投 Alphabet 旗下的药物研发公司 Isomorphic Labs。还有近四分之一论文作者完全离开公司。三名核心成员 John Jumper、Jonas Adler 以及 Alexander Pritzel 跳槽到了 Anthropic。OpenAI 研究主管 Mark Chen 此前评论说，AI 研究人员希望在前沿实验室工作，而不是疲于追赶。

A supply-chain compromise targeting the npm ecosystem has introduced a multi-stage remote access trojan (RAT) and credential stealer through hijacked Joyfill packages, highlighting an increasingly sophisticated abuse of trusted developer dependencies. On July 28, 2026, malicious beta releases of @joyfill/components and @joyfill/layouts were published to the npm registry, embedding heavily obfuscated payloads directly into compiled […]

The post Joyfill npm Supply-Chain Attack Deploys RAT and Developer Credential Stealer appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

近年来，随着生成式人工智能、社交媒体和虚拟资产等数字技术和平台的广泛应用，各类新型网络诈骗犯罪在多国蔓延，相关犯罪形式呈现工具智能化、分工产业化、活动跨境化和赃款加密化等特点，不法分子越来越多地利用人工智能、匿名通信……

当前，人工智能技术持续迭代升级，已实现从辅助工具向核心能力的全方位转型，驱动算力需求爆发式增长。全球算力产业链软硬件供需结构不断优化，核心产品和服务效能持续提升，算力市场供需格局发生深刻变化。算力作为数字经济的核心生产力……

《实施方案》的出台标志着“十五五”时期我国已形成IPv6发展顶层设计，体现了我国IPv6发展的新目标新任务。在“十四五”时期IPv6规模部署工作取得显著成效基础上，“十五五”时期加快IPv6与经济社会各行业各领域广泛深度融合的思路更加清晰……