Aggregator

Telegram's t.me links stopped resolving after the .ME registry applied serverHold. The app still works, while the reason for the domain action remains unknown.

Researchers at Jamf Threat Labs detail CrashStealer, which steals passwords, cryptocurrency wallets and more

Warm water in household pipes can be a breeding ground for harmful bacteria.

Researchers at KU Leuven tested 85 of the most popular crypto wallets that run as browser extensions and found that the wallets themselves leak enough to link and track the people using them. The way these wallets talk to websites and blockchain servers can tie a person's separate addresses together and let outsiders follow them from site to site. And on a site that already holds a name or

SAP has addressed 16 vulnerabilities across multiple products as part of its July 2026 security updates, including three critical flaws in NetWeaver, Commerce Cloud, and AppRouter. [...]

AI security agents are starting to influence real security decisions. They summarize findings, prioritize remediation, recommend next steps, and help teams move faster. But most still rely on fragmented risk signals: scanner output, severity scores, threat intelligence, configuration findings, and exposure data. That fragmentation matters because attackers do not move through environments one

Security Operations Centers (SOCs) often encounter challenges that go beyond just managing alert volume. Each alert necessitates that analysts validate indicators, investigate behaviors, assess scope, decide on escalation paths, and create detections to prevent future occurrences. When these tasks rely on separate tools, crucial evidence can be lost during transitions, leading analysts to enrich the […]

The post ANY.RUN Integrates Threat Intelligence and Interactive Sandbox to Streamline SOC Workflows appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

At least two distinct threat actors are weaponizing a novel evasion technique called OAuth client ID spoofing in cloud campaigns, while slipping past telemetry. The activity allows users to enumerate user accounts and validate stolen credentials in Microsoft Entra ID environments, without ever generating a successful sign-in event that would otherwise alert defenders. And bad actors have begun

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2008-4128, a cross-site request forgery (CSRF) vulnerability affecting Cisco IOS, to its Known Exploited Vulnerabilities (KEV) Catalog. The vulnerability was officially listed on July 13, 2026, with a remediation deadline of July 16, 2026, for Federal Civilian Executive Branch agencies. Although this vulnerability dates back […]

The post CISA Adds Cisco IOS CSRF Flaw Enabling Arbitrary Command Execution to KEV Catalog appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

关键词MemGhost攻击你有没有想过，如果有人能偷偷改写你AI助手的"记忆"，会发生什么？

关键词AI你用AI编程助手写代码的时候，有没有想过一个问题：它到底把你的代码传到了哪里？

关键词Telegram今天，全球数亿Telegram用户发现一个问题：所有t.me短链接全部打不开了。

在企业环境中，大多数使用的都是域环境，在后渗透中就需要进行域环境的权限维持来造成持续危害。

Microsoft is now testing a cleaner and faster version of Windows Search that should prioritize relevant results over ads and promotional content. [...]

Submit #856290 / VDB-165082

Submit #856171 / VDB-378291

Submit #856170 / VDB-378291

Google has started rolling out FIDO2-compliant physical security key support as a second factor for authentication in Google Credential Provider for Windows (GCPW) to all Google Workspace customers. GCPW is a free tool that lets users sign in to Windows computers with their Google Workspace account instead of, or alongside, a Windows username and password. The update allows organizations to strengthen account security by enabling administrators to enforce 2-step verification (2SV) with hardware security keys … More →

The post Google adds FIDO2 keys and phone passkeys to Windows login via GCPW appeared first on Help Net Security.

IDC 的数据显示，2026 年第二季度，中国智能手机出货量约为 6600 万部，同比下降 4.3%，连续第五个季度下滑。内存等组件成本上涨迫使大多数 Android 厂商提价，从而导致需求降温。华为和苹果是例外，分别实现了近 20% 和 25% 的增长。华为市场份额最高占 22.6%，其次是苹果的 18.1%，OPPO 16.0%，vivo 16.0%，小米 12.4% ，荣耀 11.3%，Wiko 1.1%，联想 0.3%，中兴 0.3% 以及三星 0.1%。由于涨价 618 期间智能手机销量同比下降近 15%。相比其它涨价的 Android 厂商，华为和苹果则能维持价格的稳定。