Aggregator

​新一代「超级个体户」神器。

Hugging Face зафиксировала около 6280 групп действий, связанных со взломом внутренней инфраструктуры.

Currently trending CVE - Hype Score: 10 - NGINX Plus and NGINX Open Source have a vulnerability in the ngx_stream_ssl_module module due to the improper handling of revoked certificates when configured with the ssl_verify_client on and ssl_ocsp on directives, allowing the TLS handshake to succeed even after an OCSP check ...

Currently trending CVE - Hype Score: 10 - When NGINX Open Source is configured to proxy HTTP/2 traffic by setting proxy_http_version to 2, and also uses proxy_set_body, an attacker may be able to inject frame headers and payload bytes to the upstream peer.  Note: Software versions which have reached End of Technical ...

Currently trending CVE - Hype Score: 10 - NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression (PCRE) captures (for example, ^/((.*))$) and a ...

Currently trending CVE - Hype Score: 12 - Improper privilege management in Windows WalletService allows an authorized attacker to elevate privileges locally.

Currently trending CVE - Hype Score: 10 - A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a ...

Currently trending CVE - Hype Score: 10 - NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules. This vulnerability exists when the proxy_http_version to 2 or grpc_pass directives are used to proxy HTTP/2 traffic, the ignore_invalid_headers directive is ...

Currently trending CVE - Hype Score: 11 - An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.1 and iPadOS 18.7.1, iOS 26.0.1 and iPadOS 26.0.1, macOS Sequoia 15.7.1, macOS Sonoma 14.8.1, macOS Tahoe 26.0.1, tvOS 26.1, visionOS 26.0.1, watchOS 26.1. Processing a ...

Source code for the Flying Eagle Android remote access trojan (RAT) framework is circulating through criminal Telegram channels. Hunt.io and independent researcher NetAskari traced matching control panels and certificates to 170 internet servers. They linked the framework to a fake "公安一网通办" Public Security service application targeting Android users in China. The kit supports payment-password

ФСБ начала процедуру объявления Дурова в международный розыск.

美国以国家安全理由禁售外国制造的先进机器人。美国政府公布的文件称，现代的机器人要始终联网，扩大了攻击面，更容易泄漏数据和远程破坏。文件举例说，被称为 UniPwn 的漏洞能被攻击者用于控制宇树的人形机器人。“如果美国继续依赖外国的先进机器人设备和关键零部件，那么美国经济中依赖这些机器人的部分以及国家安全体系，将受制于外国实体的摆布。这些外国实体可能会在其选择的时机破坏或削弱供应链。”由韩国现代汽车控股的美国机器人公司波士顿动力豁免于禁令。已获准在美国销售的机器人不受影响。准备批量制造人形机器人的特斯拉公司将受益于这一禁令。

Копаемся в настройках самых популярных голосовых помощников в России.

伊朗公布的高分辨率卫星照片以及来自欧洲 ESA Sentinel-2 卫星星座的低分辨率照片，确认亚马逊位于巴林 Zallaq 和 Askar 的两座数据中心建筑遭到破坏。分析师表示数据中心的破坏程度还无法判断。伊朗方面表示袭击数据中心是因为亚马逊支持了美国的军事行动。亚马逊以及美国军方都拒绝置评。监视冲突的非营利组织 Armed Conflict Location & Event Data 称，亚马逊位于巴林 Zallaq 的数据中心在 7 月 22 日和 24 日两次遭到袭击，位于 Askar 的数据中心于 7 月 18 日和 21 日两次遭袭。

Arista выпустила исправления, но после успешного взлома обычного обновления может не хватить для восстановления безопасности.

雷神众测拥有该文章的修改和解释权。如欲转载或传播此文章，必须保证此文章的副本，包括版权声明等全部内容。声明雷神众测允许，不得任意修改或增减此文章内容，不得以任何方式将其用于商业目的。

Обычный кристалл на долю секунды стал квантовым проводником.

根据国家信息安全漏洞库（CNNVD）统计，本周（2026年7月20日至2026年7月26日）安全漏洞情况如下

Отныне система будет вести себя заметно тише и требовать меньше лишних движений.

A CVSS score 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Taha Siddiqi (@_atomiz_) of TrendAI Research' was reported to the affected vendor on: 2026-07-29, 1 days ago. The vendor is given until 2026-11-26 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.