Posts of last few hours

安全419｜一周国际网安资讯：满分漏洞集中爆发 勒索攻击瞄准政府与关键基础设施
ServiceNow AI平台一次性爆出三个满分漏洞，美国ATF、柏林市政府遭勒索组织攻击。
https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247554779&idx=1&sn=d53edc0d999833a754c27399e99316a1
Взломала браузер, получила рут-права и нашла уязвимости нулевого дня. Новая нейросеть OpenAI работает как профессиональный хакер
Astra самостоятельно ищет слабые места, пишет эксплойты и повышает привилегии до root.
https://www.securitylab.ru/news/576825.php
鳄梨树为何能一天数次变换性别
鳄梨/牛油果树是雌雄同株，它的花既能作为雌蕊接收花粉，也能作为雄蕊释放花粉。鳄梨树会在一天中数次切换性别。为了避免自花授粉，半数鳄梨树（被称为A 型）被设定为早上开雌蕊，下午开雄蕊，B 型树则与之相反。根据发表在 PNAS 期刊上的一项研究，科学家分析了数百棵鳄梨树的基因组，发现名为 SDMYB 的基因与 A/B 型树开花模式密切相关。该基因有两个等位基因，一个显性一个隐性，A 型树有一个显性一个隐性，B 型树有两个隐性。这种遗传机制并非鳄梨树所独有，其它 26 种相近树种也有相同的两个版本基因。

https://www.solidot.org/story?sid=85262
«Алиса AI» может получить доступ к банковским приложениям и системным функциям смартфонов
Минцифры готовит для ИИ новый уровень доступа к смартфонам.
https://www.securitylab.ru/news/576828.php
FulcrumSec Claims Responsibility for Manchester Airport Group Breach
Threat group FulcrumSec claims MAG breach and leaks 550GB of data online
https://www.infosecurity-magazine.com/news/fulcrumsec-manchester-airport/
运行 23 年的 P2P 僵尸网络 Sality 遭协同瓦解：没有中心节点也能被干掉？
Sality 于 2003 年首次被发现，在互联网上持续活跃了二十多年，称得上是恶意软件界的"活化石"。此次瓦解行动通过 P2P 沉洞隔离了全球超过 15,000 台受感染主机，让幕后的运营者彻底失去了对自己"家业"的控制权。
https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247520178&idx=1&sn=4171b9fb76b2f7f21216b9daa6682f63
Исправление не спасло: свежая брешь дает хакерам права администратора в JFrog Artifactory
Атакующим не нужны ни пароль, ни учётная запись, ни действия пользователя.
https://www.securitylab.ru/news/576801.php
网络安全信息与动态周报2026年第35期（8月24日-8月30日）
本周，互联网网络安全态势整体评价为良。
https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247502113&idx=1&sn=c8c9e787d539d8699f5f9bd154b6673f
Keepnet launches free SMS/Call Reporter for iOS

Keepnet, an Extended Human Risk Management (xHRM) and Secure Behavior Management platform, today launched the Keepnet SMS/Call Reporter. It is a free app that turns a suspicious SMS or phone call into a one-tap report. Anyone can download it for personal protection. Organizations can roll it out across their workforce. The app is available now on the Apple App Store, with Android release next on the roadmap. For Keepnet customers, reported events land in Keepnet … More →

The post Keepnet launches free SMS/Call Reporter for iOS appeared first on Help Net Security.

https://www.helpnetsecurity.com/2026/09/02/keepnet-launches-free-sms-call-reporter-for-ios/
Sality botnet infrastructure dismantled in joint global takedown
International law enforcement agencies and private partners have seized Sality malware infrastructure in a joint action aiming to disrupt and take down the peer-to-peer (P2P) botnet. [...]
https://www.bleepingcomputer.com/news/security/sality-botnet-infrastructure-dismantled-in-joint-global-takedown/
诚邀渠道合作伙伴共启新征程
https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247537004&idx=3&sn=56f8a9648ebd5ee18d839fdbeb309429
火绒小问答--「个人版」近期top问题解答
火绒小问答--「个人版」近期top问题解答
https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247537004&idx=2&sn=9eb60f24d7ec7e1c3f9a32b01ea195d6
火绒安全终端防护数据月报（2026-08）
火绒安全终端防护数据月报（2026-08）
https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247537004&idx=1&sn=5f76b2f73fb7472e75c78e39dee0b24a
Hackers Target Langflow in CVE-2026-0768 Attacks
Hackers are exploiting a critical Langflow flaw that lets unauthenticated attackers remotely execute Python code on vulnerable systems. Hackers have started exploiting a critical vulnerability, tracked as CVE-2026-0768 (CVSS score of 9.8), in the AI-focused low-code platform Langflow. The flaw affects the code validator in Langflow’s custom component editor, it impacts all Langflow versions up […]
https://securityaffairs.com/198270/hacking/hackers-target-langflow-in-cve-2026-0768-attacks.html
Researchers Use Claude to Port Pre-Auth RCE Exploit From One PLC Model to Another
Forescout Research - Vedere Labs said it used Anthropic's Claude to port a working pre-authentication remote code execution (RCE) exploit from one WAGO programmable logic controller (PLC) to another, executing attacker-supplied ARM shellcode on live hardware. The exploit targets CVE-2021-31886, a stack-based buffer overflow in the Nucleus FTP server's handling of the USER command
https://thehackernews.com/2026/09/researchers-use-claude-to-port-pre-auth.html
LWN 上调订阅价格
所有东西都在慢慢涨价，包括订阅服务。历史悠久的自由软件和开源新闻网站 LWN 宣布它将从 9 月 15 日起上调订阅费用。LWN 从 2002 年起采用订阅模式，过去 24 年只涨价过两次，最近一次是 2022 年。根据美国官方的数据，2022 年以来消费者价格通胀率累计接近 20%，因此 LWN 的订阅价格也将上调 20%。 订阅级别：
Starving hacker $6.00
Professional hacker $11.00
Project leader $19.00
Maniacal supporter $55.00

https://www.solidot.org/story?sid=85261
Системы слежки за военными способны раскрыть источники журналистов
Гарвард показал, как рекламная индустрия раскрывает маршруты, встречи и источники.
https://www.securitylab.ru/news/576819.php
Starman Holding 以 2.85 亿美元现金收购 GoPro
Starman Holding 以 2.85 亿美元现金收购了知名运动相机制造商 GoPro 几乎所有股份。股东将保留公司 10% 的股份；YouTube 主播 Mark“Markiplier”Fischbach 此前收购了 GoPro 8.5% 的股份——但不清楚是否还会继续持续股份。Starman 的业务相当复杂，涉及多个领域，包括手机壳品牌 Incipio、Incase、Griffin 和 Survivor，曾获得新冠病毒检测合同的 Digital Gadgets，Onward Brands 等。根据递交到 SEC 的文件，名为 Action Acquisitions LLC 的公司将成为 GoPro 的母公司。

https://www.solidot.org/story?sid=85260
Кардиомониторы замолчали: устройства собирают данные, но уже неделю не могут достучаться до серверов
Взлом медгиганта заставил врачей вернуться к ручной проверке пациентов.
https://www.securitylab.ru/news/576736.php
Triage & Response Bottlenecks Eating into MSSP Margins: How to Remove the Friction

As MSSPs take on more clients, alert volumes grow fast. Analyst capacity usually doesn’t. That gap shows up in triage and response first. Teams spend too much time checking IOCs, switching between tools, rebuilding context, and escalating cases that could have been closed earlier. Across thousands of investigations, those extra minutes turn into slower response, […]

The post Triage & Response Bottlenecks Eating into MSSP Margins: How to Remove the Friction appeared first on ANY.RUN's Cybersecurity Blog.

https://any.run/cybersecurity-blog/mssp-triage-response-bottlenecks/

Managed ad