Aggregator

当前环境出现异常，需完成验证后方可继续访问。

The newly emerged AISURU botnet has powered the largest recorded DDoS assault to date, peaking at 11.5 Tb/s.

The post The AISURU Botnet: Powering the Largest DDoS Attack in History appeared first on Penetration Testing Tools.

Huntress has published a detailed account of an incident in which attackers, having exploited a vulnerable SonicWall VPN,

The post The Hidden Danger of Plain-Text Backup Codes appeared first on Penetration Testing Tools.

A secret-stealing worm is spreading fast across the npm ecosystem, experts have warned

U.S. airlines have found themselves at the center of a scandal following revelations of large-scale transfers of passenger

The post U.S. Airlines Caught Selling Passenger Data for Warrantless Searches appeared first on Penetration Testing Tools.

Researchers from Doyensec, together with an independent author known as BitsByWill, have publicly demonstrated a working exploitation chain

The post KSMBD Exploit: A New Vulnerability Grants Remote Control of Linux Systems appeared first on Penetration Testing Tools.

CERT-AGID发现一起通过伪装成米兰理工大学邮件传播FormBook恶意软件的活动。攻击者利用看似真实的商业邀请诱骗收件人打开包含恶意脚本的ZIP文件，最终安装FormBook木马以窃取敏感数据。提醒用户警惕可疑邮件和附件。

Устаревшие iPhone снова получают обновления, но причина настораживает.

Microsoft’s Digital Crimes Unit (DCU) has seized control of 338 websites facilitating RaccoonO365, the rapidly expanding phishing-as-a-service platform that enables anyone to harvest Microsoft 365 credentials. Acting under a court order from the Southern District of New York, the DCU disrupted the operation’s technical infrastructure, denying cybercriminals access to victims and cutting off their revenue […]

The post Microsoft Takes Down 300+ Websites Behind RaccoonO365 Phishing Scheme appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

OpenAI has confirmed the launch of its new Codex model built on GPT-5, now available virtually everywhere —

The post OpenAI’s New Codex: The Next Evolution in AI-Powered Code Automation appeared first on Penetration Testing Tools.

当前环境异常导致访问受限，需完成验证后方可继续使用，并提供验证入口以解决问题。

Researchers from COMSEC, in collaboration with Google engineers, have uncovered a novel Rowhammer variant capable of circumventing protections

The post Phoenix: A New Rowhammer Attack Bypasses DDR5 Protections appeared first on Penetration Testing Tools.

这篇文章介绍了Zircuit推出了一项49.5万美元的资助计划，旨在加速Web3超级应用的发展。

美国特朗普政府提出“金穹顶”计划，旨在通过卫星、激光武器和拦截器构建太空防御系统以拦截导弹威胁。该计划预算高达1750亿美元，引发预算争议和技术质疑。专家担忧其可能引发新一轮军备竞赛，并对全球经济产生影响。

Conor Brian Fitzpatrick, the founder and operator of BreachForums, has been resentenced to three more years in prison after a federal appeals court vacated his earlier light sentence. Authorities say Fitzpatrick created and ran one of the world’s largest English-language hacker forums, where criminals bought and sold stolen data. The Justice Department and FBI emphasized […]

The post World’s Biggest Hacker Forum Admin Gets Resentenced to Serve Three More Years appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

一项针对3,001名美英网络安全经理的调查显示，26%的组织曾遭遇AI模型数据中毒攻击，20%在过去一年经历深度伪造事件。54%的组织承认AI部署过快且难以回撤。尽管79%使用AI提升安全并计划投资防御工具，但42%仍面临技能短缺问题。

A new survey of 3,001 security leaders reveals 26% of organizations have faced AI model data poisoning, 20% experienced deepfakes, and over half admit deploying AI too quickly. As AI-driven threats rise, enterprises invest in GenAI security, governance, and deepfake detection.

The post Survey Surfaces Rising Tide of Cyberattacks Involving AI appeared first on Security Boulevard.

当前环境出现异常，需完成验证后方可继续访问。

Jackie McGuire与Chuck Randolph探讨数字时代高管保护的演变，涉及网络威胁、PII滥用及AI驱动风险。Tom Pore则分析AI驱动攻击与Pentera的主动防御方案。