Aggregator

Google 发表研究报告《AI & Economy ATLAS》，它未发现有明确证据显示 AI 将导致大规模自动化以及能取代白领工作。报告是基于对 Gemini App、Google AI Mode 和 Gemini API 上 1500 万次匿名化 AI 交互的活动、任务、全景趋势和普及研究。研究发现，AI 应用仍停留在浅层，且主要以协作为主，端到端任务自动化的范围有限。计算机、金融、艺术和娱乐等领域的白领工作的 Gemini 普及率高于其它领域，金融/市场分析师、软件开发者和系统管理员是 AI 的高频用户，销售、运输工人以及食品加工/服务人员很少使用 AI。29% 的职业 AI 的影响微乎其微，另外 30% 的职业大部分工作仍然由人类负责。只有 3% 的职业会经常性的使用 AI，这些受 AI 影响最大的职业包括了软件 QA 分析师和测试人员、HR 专家以及文档管理专家。数据表明 AI 目前主要作为现有工作的补充，对某些职业中的部分任务有用，未被全面用于执行目前由人类完成的工作。员工外包给 AI 的认知任务绝大多数都不需要太多专业知识。

你有没有想过，在咖啡馆敲键盘、线上会议时打字，只通过声音就能被人还原出输入的完整文字？

TA488 returned with OWA half-click exploit deploying OWAReaper implant that survived re-imaging

JetBrains выпустила экстренное обновление. Тянуть с его установкой не стоит.

Доклад Airwars показал, где человек уже не при делах.

Russian intelligence-linked hackers are trying to seize Signal accounts by posing as support staff and asking targets for backup recovery keys. The campaign targets people with access to sensitive conversations, including officials, military personnel, political figures, journalists, and Ukrainian leaders. It relies on deception, not a break in Signal’s end-to-end encryption, but the possible loss […]

The post Russian Intelligence Hackers Phish Signal Backup Keys to Hijack Accounts and Messages appeared first on Cyber Security News.

Ruflo fixed a CVSS 10.0 flaw that exposed its MCP bridge without any authentication, putting AI provider keys, stored chats and persistent agent memory at risk.

The Minnesota IT Services (MNIT) agency activated its cybersecurity incident response capabilities across the entire state after hackers targeted more than 30 community water systems in "a coordinated cyberattack." [...]

Researchers say the Russian state-linked hacking group tracked as Laundry Bear recently began exploiting a bug in Microsoft Outlook Web Access.

A fresh supply chain scare hit software teams after attackers slipped malware into trusted open source libraries. On July 28, 2026, malicious beta builds of two Joyfill packages appeared on the npm registry. The libraries, @joyfill/components and @joyfill/layouts, are used for forms and layout work in many web apps. Anyone who imported those beta builds […]

The post Hijacked Joyfill npm Packages Deploy Worm-Like RAT and Steal Developer Credentials appeared first on Cyber Security News.

The vulnerability in the AI hosting platform Ruflo allows an unauthenticated attacker to take over the system and corrupt memory, so bad behavior can persist after patching.

Эти программы продвигались на платформе месяцами, а заметили кампанию только сейчас.

爱丁堡大学的研究人员在一年时间里跟踪了不同行业 45 名年龄在 50-66 岁之间的员工，收集了逾 1900 份自我报告的幸福感和工作场所评估数据，以及逾 5200 天的可穿戴传感器数据。结果显示，睡眠问题在参与者中间非常普遍。大多数参与者平均每晚睡眠时间为 6.5-8 小时，但九成参与者在整个研究期间都经历了睡眠障碍。研究结果表明，睡眠紊乱而非睡眠时间不足可能是许多人感觉休息不足的原因。在众多因素中，工作压力被认为与睡眠问题密切相关。

Las Vegas, USA, July 29th, 2026, CyberNewswire Catches rogue AI agents – and stops them in live production before they cause damage Sweet Security, the proactive runtime enforcement company for cloud and AI, today announced its further expansion into AI security with Agentic AI Blocking. Sweet now blocks rogue agent behavior in real time – […]

The post Sweet Security Brings Autonomous Protection to the AI Enterprise with New Blocking Capabilities appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Las Vegas, USA, July 29th, 2026, CyberNewswire Catches rogue AI agents – and stops them in live production before they cause damage Sweet Security, the proactive runtime enforcement company for cloud and AI, today announced its further expansion into AI security with Agentic AI Blocking. Sweet now blocks rogue agent behavior in real time – […]

The post Sweet Security Brings Autonomous Protection to the AI Enterprise with New Blocking Capabilities appeared first on Cyber Security News.