Aggregator

A newly uncovered cluster of more than 70 impersonation domains targeting popular Windows applications is raising fresh concerns about a scalable malware distribution campaign that leverages trust in legitimate software ecosystems. The discovery, triggered by a developer investigating unusual search results for their own application, reveals a coordinated infrastructure designed to mimic well-known tools while […]

The post Over 70 Fake Windows App Sites Could Turn Trusted Downloads Into Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Американские лаборатории создали «идеальный» кремний для квантовых чипов.

Google Search indexed public Claude AI chat links, letting people find shared conversations through the site query before those listings disappeared soon after.

The China-linked cybercrime group behind the use of income tax-related phishing lures targeting Indian taxpayers, tax professionals, and corporate finance teams has been observed using a sophisticated crypter service called Cruciferra. According to a new analysis by Proofpoint, Cruciferra has been utilized by various unrelated cybercriminal threat clusters to deliver a wide array of remote

AI与云安全事件案例分析周报2026.07.20 - 2026.07.24

GitHub has introduced a default cooldown period for Dependabot version updates to decrease the risk of organizations automatically adopting malicious or compromised open-source dependencies as soon as they are released. This change comes in response to a rise in supply chain attacks where attackers publish trojanized package versions to public registries, relying on automated update […]

The post GitHub Adds Dependabot Cooldown to Stop Poisoned Dependencies appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

野生牦牛数量过去三十年减少了逾三分之一，据野生动物保护协会统计，目前仅存 1 万至 2 万头。部分珍稀物种如金丝野牦牛仅剩 300 余头，濒临灭绝。西藏高原生物研究所等研究团队试图通过克隆优质种牛去解决牦牛繁殖率低、优质种源少、种质退化等问题。2025 年 7 月 10 日，世界首头体细胞克隆牦牛诞生。今年 3 月-4 月研究基地先后诞生了 10 头克隆牦牛。研究人员的目标是到 2028 年克隆 100 头优质牦牛。专家承认，在自然保护中使用克隆技术以及在养殖业中使用基因选择有其合理性。但哈佛医学院兽医兼生物伦理学家 Lisa Moses 指出其伦理边界仍然是模糊的，任何克隆项目都应高度透明并接受公众监督。

论文首次探索了知识增强LLM推理在虚假网络威胁情报检测中的应用，通过知识约束、双向解释生成和证据融合，实现高准确率、可解释、可验证的自动化CTI真实性分析，该研究为构建可信威胁情报生态提供了新的技术路径。

Студент из Тогучина предстанет перед судом вместе с сообщниками.

Crypto criminals are increasingly weaponizing social media intelligence to identify and target high-value individuals in a surge of violent “wrench attacks,” marking a shift from purely digital exploitation to coordinated physical coercion campaigns. Recent threat intelligence indicates that attackers are systematically profiling cryptocurrency holders using publicly available data across platforms such as Instagram, TikTok, X, […]

The post Crypto Criminals Use Social Media Profiling to Select Victims for Violent Wrench Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Halcyon’s latest quarterly ransomware report showed that while ransomware attacks are declining, obfuscation techniques are getting harder to fight against

钱、人才都不缺，问题出在结构上。

2026年7月，研究人员公开披露了一种名为MemGhost的新型攻击技术。

本周更新手动分析、逐行调试、重复排查……在攻防对抗中，效率就是生命线，可当恶意样本指数级增长，人力终究有极限。

CVSS风险评分高达9.0分

看雪论坛作者ID：xiaoxinre

Fastjson2 存在高危 RCE 漏洞，影响 2.0.62 及以下版本，官方补丁已发布，建议立即升级。

已复现 | Fastjson2远程代码执行漏洞