Aggregator

在边界不清晰的地方如业务逻辑工作流、授权规则和其他微妙的安全决策，智能体会犯错。

速修复

在研发团队里，有一件事几乎人人都知道 “很重要”，但又常常被拖延、被简化、被走过场——代码审查（Code R

近期，国家卫生健康委、国家发展改革委、工业和信息化部、国家中医药局、国家疾控局共同印发了《关于促进和规范“人工智能+医疗卫生”应用发展的实施意见》。

中国国家网络与信息安全信息通报中心通过支撑单位发现一批境外恶意网址和恶意IP，境外黑客组织利用这些网址和IP持续对中国和其他国家发起网络攻击。

基于攻击面管理和持续风险管理的理念，本研究完成了原型系统的设计和研发工作，并基于此系统实现了对卷烟制造企业的自动化、周期化的风险测绘。通过人工验证后的风险数据指导原型系统的优化和企业的网络安全监测，主要攻击风险包括以下四点……

近期，境外一家购物中心的户外大型数字广告牌突然异常，连续数小时循环播放某已故知名政治活动家被篡改的、带有戏谑性和讽刺性的图片，引发业界对公共场所数字显示屏等公共数字设备潜在风险的重视。

Японцы заставили пару «материя-антиматерия» пройти сквозь стену и не взорваться.

网络局势再升级

为智慧水务高质量发展注入新动能

Once again, data shows an uncomfortable truth: the habit of choosing eminently hackable passwords is alive and well

A notorious marketplace for fraud, Tudou Guarantee, appears to have closed its public Telegram groups

满10人开班～

攻击者借ACME挑战路径绕过Cloudflare所有安全规则

看雪论坛作者ID：易之生生

A vulnerability was found in Linux Kernel up to 6.1.159/6.6.119/6.12.64/6.18.3/6.19-rc3 and classified as critical. The affected element is an unknown function of the component mac80211. Such manipulation leads to privilege escalation. This vulnerability is uniquely identified as CVE-2025-71127. The attack can only be initiated within the local network. No exploit exists. It is suggested to upgrade the affected component.

A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.1.159/6.6.119/6.12.63/6.18.2/6.19-rc1. The impacted element is the function sys_perf_event_open of the file kernel/tracepoint.c. Executing a manipulation can lead to privilege escalation. This vulnerability is tracked as CVE-2025-71125. The attack is only possible within the local network. No exploit exists. It is advisable to upgrade the affected component.

A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.1.159/6.6.119/6.12.63/6.18.3/6.19-rc3. Impacted is the function crypto_aead_encrypt. Executing a manipulation can lead to null pointer dereference. The identification of this vulnerability is CVE-2025-71131. The attack needs to be done within the local network. There is no exploit available. It is advisable to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.1.159/6.6.119/6.12.63/6.18.3. Affected is the function adv7842_cp_log_status of the component media. Executing a manipulation can lead to unchecked return value. This vulnerability appears as CVE-2025-71136. The attacker needs to be present on the local network. There is no available exploit. You should upgrade the affected component.