Aggregator

Группа Kimwolf получила доступ к управлению крупнейшей сетью зараженных Android-приставок

​下一个 Clawdbot，何必生长于 Mac mini？

印度尼西亚苏拉威西发现的手形拓印，可追溯到至少 67800 年前，可能是迄今发现的最古老岩画。这些发现有力支持了早期人类经苏拉威西的北部路径迁移至萨胡尔（连接澳大利亚与新几内亚的古代陆地）的理论。岩画为古代人类的创造性和迁移模式提供了珍贵线索。印度尼西亚以世界最早洞穴艺术闻名。为了深入了解苏拉威西未被充分研究的地区，澳大利亚学团队调查了苏拉威西东南部的多处洞穴，记录了 44 处遗址，其中 14 处是此前未知的，并描述了这些洞穴中发现的岩画图样。他们对覆盖岩画上方和下方的微小碳酸钙沉积物做了取样，运用高分辨率激光剥蚀铀系法进行测年。结果表明，这些岩画至少出现于 67800 年前，比此前发现最古老的岩画早约1100 年。

Sportswear giant Nike is actively investigating a potential cybersecurity incident after WorldLeaks, a financially motivated ransomware group, claimed responsibility for a significant data breach affecting the company. The group announced the breach on its darknet leak site on January 22, 2026, claiming to have exfiltrated over 1.4 terabytes of internal data and threatening to release […]

The post Nike Investigating Data Breach Following WorldLeaks Ransomware Group Claim appeared first on Cyber Security News.

ESET researchers discover an Android spyware campaign targeting users in Pakistan via romance scam tactics, revealing links to a broader spy operation

黑客组织WorldLeaks宣称攻破Nike核心网络，盗走超18万份机密文件。

抓紧预约！看雪视频号见

看雪论坛作者ID：A0tem

Google on Tuesday revealed that multiple threat actors, including nation-state adversaries and financially motivated groups, are exploiting a now-patched critical security flaw in RARLAB WinRAR to establish initial access and deploy a diverse array of payloads. "Discovered and patched in July 2025, government-backed threat actors linked to Russia and China as well as financially motivated

Закон обязал платформы для взрослых внедрить проверку личности под угрозой блокировок.

近日，“谛听”团队林小李博士撰写的论文《A Real-Time Hacker Group Identification Method for Industrial Control Systems Based on Gaussian Self-Organising Incremental Neural Network》被国际期刊《IEEE Internet of Things Journal》录用。

《原子科学家公报（Bulletin of the Atomic Scientists）》将末日时钟设定距离午夜 85 秒。这是自 1947 年冷战时期科学家创建末日时钟衡量人类文明距离灭绝有多远以来距离理论上的毁灭时刻最近的一次。《原子科学家公报》列举了毁灭风险上升的因素：三大核大国咄咄逼人的行为、脆弱的核军控框架、乌克兰和中东持续的冲突、AI 不受监管的集成到军事系统，以及气候变化等。

McAfee announced upgrades to Scam Detector that improve protection across common scam channels. The enhanced tool helps users check QR code safety and identify suspicious direct messages across apps. In 2025, according to McAfee’s 2026 State of the Scamiverse report, Americans were hit hard by online scams, receiving an average of 14 scam messages per day across text, email, and social media. On top of that, people lost nearly 114 hours a year just trying … More →

The post McAfee upgrades Scam Detector to spot QR code scams and suspicious messages appeared first on Help Net Security.

为保障人工智能（AI）及智能代理体（Agent）的安全使用，必备的控制措施包括深度可见性、强身份认证以及AI感知的数据防泄漏。

Cybersecurity researchers have discovered two malicious packages in the Python Package Index (PyPI) repository that masquerade as spellcheckers but contain functionality to deliver a remote access trojan (RAT). The packages, named spellcheckerpy and spellcheckpy, are no longer available on PyPI, but not before they were collectively downloaded a little over 1,000 times. "Hidden inside the Basque

无限 Debugger 绕过、禁用 F12 绕过、窗口尺寸检测绕过、字符串拼接无限 Debugger 绕过、Function.prototype.toString () 环境检测绕过

深入分析微软最新漏洞Microsoft Copilot Reprompt单击触发的隐蔽数据外传链漏洞

Форум пройдет 18–20 февраля в Екатеринбурге.

Cloudbrink has expanded security and performance benefits for AI agents and online AI services. The new AI capabilities are available on the same platform as Cloudbrink’s secure connectivity, allowing companies to secure users, apps, and AI in a more unified way. According to a McKinsey report, 88 percent of enterprises globally are using AI for at least one business function. Along with this rapid AI adoption rate come the cybersecurity risks associated with AI, compounded … More →

The post Cloudbrink adds AI innovations to its platform to protect agents, apps, and data appeared first on Help Net Security.

微软被发现将专门用于测试的 example.com 的流量重路由到日本住友电工的域名 sei.co.jp。该错误配置已经修正，微软表示正对此展开调查。example.com 以及 example.net 和 example.org 是保留用于测试的域名，被要求解析到 IANA 指定的 IP，不应该被任何一方访问。但 Azure 和其它微软网络中的设备此前被发现一直在将部分 example.com 流量路由到 sei.co.jp 的子域名。而在 Outlook 中设置测试账号 [email protected] 时邮件流量会自动配置路由到两个 sei.co.jp 子域名：imapgms.jnet.sei.co.jp 和 smtpgms.jnet.sei.co.jp。目前不清楚住友电工为什么会卷入此事。 Tinyapps.org 本月初报道称，该错误配置已存在五年之久。