Aggregator

Microsoft Researchers Link Turkish Spy Group to Output Messenger Zero-Day Hack
A Turkish-linked cyberespionage group known as Marbled Dust exploited a zero-day in the Output Messenger Server Manager application to spy on Kurdish military operations in Iraq. Microsoft reported the hack and called for immediate mitigation to block credential theft and malware delivery.

Prosecutors Say Liridon Masurica Ran BlackDB.cc
A Kosovar man is being held in a Tampa jail after being extradited on charges that he was the main administrator of an online illicit marketplace in operation since 2018. Prosecutors accused Liridon Masurica, 33, of being the force behind BlackDB.cc.

CEO Howard Ting's Resignation Comes as Data Protection Company Hits $1B Valuation
Cyberhaven appointed product chief Nishant Doshi as interim CEO as longtime leader Howard Ting transitions to the board. With a sevenfold valuation increase and deep investment in Gen AI security and DSPM, the company is preparing to unify data controls across enterprises.

CISA Said Its Cyber Alerts Were Moving to X on Monday. By Tuesday, the Plan Changed.
The U.S. cyber defense agency reversed plans to move cybersecurity alerts off its .gov site Tuesday and acknowledged the "confusion" the decision caused within the cybersecurity community, amid concerns that relying on platforms like X would reduce visibility and public access to critical warnings.

提到扩散模型（DMs）大家可能不太熟悉，但是提到AIGC、文生图、文生视频等关键词，大家应该都或多或少听说过。而扩散模型正是其底层的支撑技术。 比如最近在某音上很火的‘回答我’这个梗，背后也离不开扩散模型

01.NET内网安全攻防报刊小报童电子报刊【.NET内网安全攻防】也正式上线了，引入小报童也是为了弥补知识星球

With the rise of AI infrastructures, the rise of attacks on such vulnerable infrastructure is inevitable. Insecure AI infrastructure can expose organizations to significant risks, including data breaches and manipulation of AI-driven decisions. Often,...

The post AIGoat: A deliberately Vulnerable AI Infrastructure appeared first on Penetration Testing Tools.

巴基斯坦黑客组织APT36针对印度军队最新高级钓鱼样本分析

小米被海信 Vidda 诋毁获赔 55 万；谷歌成立人工智能初创企业基金，意在挖掘「下一个 OpenAI」

小米被海信 Vidda 诋毁获赔 55 万；谷歌成立人工智能初创企业基金，意在挖掘「下一个 OpenAI」

フィッシング対策協議会は、「SSL/TLSサーバー証明書におけるWHOIS情報を利用したドメイン名使用権確認方法の廃止について」を公開しました。SSL/TLSサーバー証明書の導入において必要なドメイン名使用権確認方法として一般的だったWHOIS情報の利用廃止にあたり、代替確認方法について説明されています。

dummy Generator of static files for testing file upload functionality. When generating a png, as in the following screenshot, you can generate a png of a specified size. Motivation I often test the file...

The post dummy: Generator of static files for testing file upload appeared first on Penetration Testing Tools.

基于5G技术应用构建一个更安全，更高效的工业网络安全防护体系。

基于5G技术应用构建一个更安全，更高效的工业网络安全防护体系。

The company has addressed zero-day vulnerabilities for eight consecutive months without deeming any of them critical at the time of disclosure.

The post Microsoft’s Patch Tuesday closes 72 vulnerabilities, including 5 zero-days appeared first on CyberScoop.

有很多小伙伴对调试so文件都有疑惑，网上很多都是不是很全或者很复杂，这里详细说明到底如何能够调试起so文件。这里我们介绍如何调试so 文件：！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！一定要开启su权限！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！