Aggregator

尚不确定埃森哲客户的影响规模

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

Отельный бизнес готовится к обязательному внедрению Max для приёма гостей.

A fake installer for a popular Chinese VPN service is quietly handing full remote control of infected computers to unknown attackers. The malicious file poses as a setup tool for LetsVPN, a tool many users in China rely on to bypass strict internet blocks. Instead of just installing the VPN, it also drops a hidden […]

The post GoodPersonRAT Uses Fake LetsVPN Installer to Give Attackers Full Remote Control appeared first on Cyber Security News.

Vulnerability / Endpoint SecurityMicrosoft has released security updates for a Defender vulnerabil

Microsoft has released security updates for a Defender vulnerability known as RoguePlanet, nearly a month after details of the flaw became public. The vulnerability, tracked as CVE-2026-50656 (CVSS score: 7.8), is a privilege escalation issue in the Microsoft Malware Protection Engine ("mpengine.dll"), which provides scanning, detection, and cleaning capabilities for its antivirus and

据大型文娱经纪公司等组成的NPO法人“肖像公开权拥护监视机构”的调查获悉，关于疑似使用AI擅自生成艺人肖像、声优声音的图片及视频，去年六月起约两个月期间总计发现43483起此类情况。被上传至社交平台的

Google has released a new Chrome Stable update that fixes 27 security vulnerabilities, including two critical flaws that could allow remote code execution (RCE) on affected systems. The update, now rolling out globally, upgrades Chrome to version 150.0.7871.114/.115 on Windows and macOS, and 150.0.7871.114 on Linux. The most severe issues addressed in this release are […]

The post Chrome Update Patches 27 Vulnerabilities including Two Code Execution Flaws appeared first on Cyber Security News.

Экс-разработчик Mumble удалил репозитории OpenMandriva и попытался сломать GNOME и COSMIC.

A new exploit called “Friendly Fire” hijacks Anthropic’s Claude Code CLI and OpenAI’s Codex CLI to execute attacker-controlled binaries during routine security reviews of third-party code. The attack disclosed by Security researchers at the AI Now Institute targets Claude Sonnet 4.6, Sonnet 5, and Opus 4.8, as well as GPT-5.5, using nothing more than the […]

The post Cyber AI Agents Like Claude Code, GPT-5.5 Can Be Hijacked to Run Malicious Code Remotely appeared first on Cyber Security News.

Fake VPN and 7-Zip Apps Turn Victims Into Residential Proxy Nodes

Fake apps like WireVPN and a trojanized 7-Zip turn victims’ devices into residential proxies, letting criminals route traffic through their IPs. Infoblox’s threat research team started pulling on a single thread in early 2026: a fake version of the 7-Zip archive utility hosted at 7zip[.]com instead of the real site, 7-zip[.]org. The researchers uncovered a […]

7月21日暑假开放注册即将到来，届时会提前发布公告通知，“星标”公众号以防错过。

Администраторам придется заранее отключать функцию, если облачное хранение настроек не подходит компании.

A new survey shows security leaders have an inflated sense of safety regarding their collaboration tools and platforms.

提示词注入将永远有效，只要机器学习模型无法区分授权输入与未授权输入。

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

亚马逊内部规划文件显示，公司正在秘密推进一项名为 “Moonraker” 的全新 Alexa AI 项目，旨在将这一语音助手推向AI智能体赛道。然而，该项目极其高昂的研发与运行成本已在公司内部引发广泛

Helix has surfaced as a fast-moving data extortion group that targets Microsoft 365 users through phone scams and cloud-focused phishing instead of traditional malware drops. Attackers are after access first, then large volumes of corporate files, with SharePoint libraries becoming a central prize in multiple incidents. The campaign stands out because it leans on identity […]

The post Helix Data Extortion Group Uses Vishing and Device Code Phishing to Steal SharePoint Data appeared first on Cyber Security News.