Aggregator

Researchers at Wiz found that a flaw in six popular AI coding assistants lets a booby-trapped code project quietly take control of a developer's computer. The assistant asks permission to edit one harmless-looking file, but the write lands on a sensitive one instead. The affected tools are Amazon Q Developer, Anthropic's Claude Code, Augment, Cursor, Google Antigravity, and Windsurf.

CVE-2025-38616漏洞分析

威胁情报狩猎发现疑似红队样本分析，到发现自研C2

漏洞利用

misc writeup

大模型，RCE，SRC，AI安全

HVV过程中的一些感悟

Palo Alto Networks has disclosed a high-severity vulnerability in PAN-OS that could allow unauthenticated attackers to execute arbitrary code or trigger a denial-of-service (DoS) condition by sending specially crafted network traffic. Tracked as CVE-2026-0288, the flaw carries a CVSS-B score of 9.2 (HIGH, CVSS-BT: 7.2) and has been assigned the HIGHEST urgency rating by the […]

The post Palo Alto PAN-OS Vulnerability Allows Arbitrary Code Execution Through Malicious Network Traffic appeared first on Cyber Security News.

2026年5月27日，日本国会参议院全票通过《国家情报会议设置法》。很多人把这件事当成一次机构重组来看。这个

2026年2月28日凌晨，超过100架美国飞机从海陆两个方向涌入伊朗领空，形成一波同步打击浪潮。

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

Прыжки, песни и синхронные жесты дают болельщикам чувство единства, но та же сила может сделать толпу опасной.

如果你已经使用Spotify很多年了，你的音乐媒体库可能非常庞大，以至于手动浏览非常麻烦。用户一直能够置顶艺术家、专辑和播放列表，让它们显示在媒体库顶部，但直到最近，用户只能固定最多四个项目。不过现在

Cybersecurity researchers have disclosed details of a new threat actor dubbed Lurking Lizard that h

Cybersecurity researchers have disclosed details of a new threat actor dubbed Lurking Lizard that has been operating an end-to-end malicious residential proxy business using an infrastructure comprising more than 230 lookalike domains. The activity dates back to at least August 2022, according to DNS threat intelligence firm Infoblox. One such campaign, observed earlier this year, involved the

2026年7月9日 12:00软件资讯00.39K

IT services and consulting giant Accenture has confirmed it suffered a security breach after a threat actor claimed to have stolen 35 GB of source code and other sensitive data from the company. A threat actor operating under the alias “888” posted a listing on the cybercrime forum PwnForums on July 6, 2026, offering the […]

The post Accenture Confirms Data Breach – Hacker Claims Theft of Internal Source Code appeared first on Cyber Security News.

A vulnerability has been found in Microsoft Edge and classified as problematic. Impacted is an unknown function. This manipulation causes improper access controls. This vulnerability is tracked as CVE-2026-58525. The attack is possible to be carried out remotely. No exploit exists.

据战略与国际研究中心未来实验室副主任兼数据研究员亚西尔·阿塔兰称，中国最新、最先进的AI模型，例如智谱的GLM-5.2，正在缩小与美国竞争对手的性能差距，并以相对低廉的价格吸引客户。这种转变正在重塑全