Aggregator

关键词漏洞安全研究员近日披露了一个影响 Check Point 安全管理服务器的严重漏洞，攻击者无需任何凭据即

The Federal Security Service of the Russian Federation (FSB) on Wednesday said it charged Telegram founder Pavel Durov for allegedly facilitating terrorist activities and for failing to remove prohibited information in violation of Russian law. The principal security agency said the instant messaging platform "failed to remove numerous channels, chats, and bots on the platform that are

IBM Cost of a Data Breach Report warns that the global average cost of a data breach has reached a record high of $4.99m – and AI-backed attacks have played a role

Alphabet 上周公布的 4～6 月财报显示，净利润为 1121 亿美元，达到上年同期 4 倍。但其自由现金流 4～6 月为 -58 亿美元，自 2004 年上市以来首次转负。另一家巨头亚马逊和 Alphabet 一样，自由现金流正在急剧减少。原因被认为是加速投资 AI 数据中心。亚马逊 1～3 月的自由现金流同比减少 95%，降至 12 亿美元。如果 4～6 月的自由现金流转负，可能会加剧市场对 AI 过度投资的担忧。

随着 Google DeepMind 对曾使其跻身全球顶尖人工智能实验室之列的研究战略进行全面调整，AlphaFold 研发团队已被解散。AlphaFold 是一个能预测蛋白质结构的人工智能系统，曾经荣获诺贝尔奖。过去一年，AlphaFold 论文的多数原作者已被调任。DeepMind 证实，这些员工已在公司内部转岗，参与围绕 Gemini 大型语言模型开发的项目，以及酶设计、核聚变和基因组学等领域的工作。部分人则转投 Alphabet 旗下的药物研发公司 Isomorphic Labs。还有近四分之一论文作者完全离开公司。三名核心成员 John Jumper、Jonas Adler 以及 Alexander Pritzel 跳槽到了 Anthropic。OpenAI 研究主管 Mark Chen 此前评论说，AI 研究人员希望在前沿实验室工作，而不是疲于追赶。

A supply-chain compromise targeting the npm ecosystem has introduced a multi-stage remote access trojan (RAT) and credential stealer through hijacked Joyfill packages, highlighting an increasingly sophisticated abuse of trusted developer dependencies. On July 28, 2026, malicious beta releases of @joyfill/components and @joyfill/layouts were published to the npm registry, embedding heavily obfuscated payloads directly into compiled […]

The post Joyfill npm Supply-Chain Attack Deploys RAT and Developer Credential Stealer appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

近年来，随着生成式人工智能、社交媒体和虚拟资产等数字技术和平台的广泛应用，各类新型网络诈骗犯罪在多国蔓延，相关犯罪形式呈现工具智能化、分工产业化、活动跨境化和赃款加密化等特点，不法分子越来越多地利用人工智能、匿名通信……

当前，人工智能技术持续迭代升级，已实现从辅助工具向核心能力的全方位转型，驱动算力需求爆发式增长。全球算力产业链软硬件供需结构不断优化，核心产品和服务效能持续提升，算力市场供需格局发生深刻变化。算力作为数字经济的核心生产力……

《实施方案》的出台标志着“十五五”时期我国已形成IPv6发展顶层设计，体现了我国IPv6发展的新目标新任务。在“十四五”时期IPv6规模部署工作取得显著成效基础上，“十五五”时期加快IPv6与经济社会各行业各领域广泛深度融合的思路更加清晰……

CNCERT监测发现，某挖矿组织近期活动频次显著增加，该组织主要以SSH弱口令暴力破解进行传播，以当前受害主机为跳板，对其所在网段及C2下发的新IP列表持续进行SSH暴力破解，成功后又植入同样的样本重复上述攻击行为，形成自我复制和横向扩散。

如有意见或建议，请于2026年8月12日前反馈。

本文旨在剖析中美博弈背景下科技安全的逻辑转变，并审视全球多极力量的博弈图景，探讨在后全球化时代科技治理如何超越零和博弈，在可控的竞争边界艰难地寻求效率与安全的再平衡。

Houston City College has been linked to a significant data breach that has affected approximately 832,000 students and alums. This breach occurred in June 2026 when data allegedly stolen during an extortion campaign by the hacker group ShinyHunters was published online. The incident exposed 831,642 unique email addresses along with a wide range of sensitive […]

The post Houston City College Data Breach Impacts 832,000 Students and Alumni appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Оплошность одного сотрудника привела аналитиков прямо к скрытой правительственной инфраструктуре.

Storms, earthquakes, and infrastructure failures disrupted internet access throughout the second quarter, while governments deliberately shut networks down, according to Cloudflare’s latest Internet Disruption Summary. Based on Cloudflare Radar traffic data, the report covers internet disruptions recorded between April and June 2026. Governments switching access on and off Iran began restoring nationwide internet access on May 26, ending an 88-day shutdown that began on February 28. Traffic hit 40% of pre-shutdown levels the next day. … More →

The post Cloudflare reveals what’s behind major internet outages appeared first on Help Net Security.

For now, the use of AI benefits vulnerability research more than vulnerability exploitation, a VulnCheck researcher said

Хрупкий программный код сбил расписание полётов по всей территории США.

The Hugging Face breach shows there is a gap in federal policy. The frameworks to govern autonomous AI already exist—there just needs to be the desire to apply them.

The post OpenAI’s rogue AI agent shows why we need federal rules for autonomous systems appeared first on CyberScoop.

多项高危漏洞集中修复，建议尽快升级系统

看雪论坛作者ID：只会逆一点点