OpenAI Japan announces Japan Teen Safety Blueprint to put teen safety first
OpenAI Japan announces the Japan Teen Safety Blueprint, introducing stronger age protections, parental controls, and well-being safeguards for teens using generative AI.
Aggregator
Apps, APIs, and DDoS 2026: The Industrialization of Cyberattack Campaigns
3 months 3 weeks ago
Kimberly Gomez
It’s time to get serious about post-quantum security. Here’s where to start.
3 months 3 weeks ago
Quantum computing promises a revolution in science, but it also signals the end of current security standards. Here is why enterprises must transition to post-quantum cryptography before "harvest now, decrypt later" attacks take hold.
The post It’s time to get serious about post-quantum security. Here’s where to start. appeared first on CyberScoop.
Greg Otto
Google cracks down on Android apps abusing accessibility
3 months 3 weeks ago
Malware has been abusing Android’s accessibility features for years. Google just made that a lot harder.
The post Google cracks down on Android apps abusing accessibility appeared first on Security Boulevard.
Malwarebytes
新型SaaS钓鱼攻击曝光：LiveChat这样的正规客服软件，如何成了帮凶？
3 months 3 weeks ago
新型钓鱼攻击滥用合法客服平台，实施多步骤信息套取。
某安全so库深度解析
3 months 3 weeks ago
看雪论坛作者ID：教教我吧~
新课首发！VMProtect分析与调试器插件开发
3 months 3 weeks ago
从0到1开发x32/x64Dbg插件，搞定高版本VMP
【漏洞通告】OpenClaw WebSocket共享令牌权限提升漏洞
3 months 3 weeks ago
2026年3月17日，深瞳漏洞实验室监测到一则OpenClaw组件存在权限提升漏洞的信息，漏洞威胁等级：高危。
CVE-2026-4202 | Redirect Tabs Extension up to 2.1.1/3.1.6/4.0.4 on TYPO3 authorization
3 months 3 weeks ago
A vulnerability, which was classified as problematic, has been found in Redirect Tabs Extension up to 2.1.1/3.1.6/4.0.4 on TYPO3. This affects an unknown function. The manipulation leads to missing authorization.
This vulnerability is traded as CVE-2026-4202. It is possible to initiate the attack remotely. There is no exploit available.
It is advisable to upgrade the affected component.
vuldb.com
CVE-2026-4208 | E-Mail MFA Provider Extension up to 2.0.0 on TYPO3 authorization
3 months 3 weeks ago
A vulnerability classified as problematic was found in E-Mail MFA Provider Extension up to 2.0.0 on TYPO3. The impacted element is an unknown function. Executing a manipulation can lead to authorization bypass.
This vulnerability appears as CVE-2026-4208. The attack may be performed from remote. There is no available exploit.
vuldb.com
CVE-2026-1323 | Mailqueue Extension up to 0.4.4/0.5.1 on TYPO3 deserialization
3 months 3 weeks ago
A vulnerability classified as critical has been found in Mailqueue Extension up to 0.4.4/0.5.1 on TYPO3. The affected element is an unknown function. Performing a manipulation results in deserialization.
This vulnerability is reported as CVE-2026-1323. The attack is possible to be carried out remotely. No exploit exists.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2026-23241 | Linux Kernel up to 6.19.5 audit /tmp/test getxattr information disclosure (WID-SEC-2026-0754)
3 months 3 weeks ago
A vulnerability described as critical has been identified in Linux Kernel up to 6.19.5. Impacted is the function getxattr of the file /tmp/test of the component audit. Such manipulation leads to information disclosure.
This vulnerability is documented as CVE-2026-23241. The attack requires being on the local network. There is not any exploit available.
Upgrading the affected component is recommended.
vuldb.com
CVE-2025-71239 | Linux Kernel up to 6.19.5 audit fchmodat2 privilege escalation (WID-SEC-2026-0754)
3 months 3 weeks ago
A vulnerability marked as critical has been reported in Linux Kernel up to 6.19.5. This issue affects the function fchmodat2 of the component audit. This manipulation causes privilege escalation.
This vulnerability is registered as CVE-2025-71239. The attack requires access to the local network. No exploit is available.
It is suggested to upgrade the affected component.
vuldb.com
Konni Deploys EndRAT Through Phishing, Uses KakaoTalk to Propagate Malware
3 months 3 weeks ago
North Korean threat actors have been observed sending phishing to compromise targets and obtain access to a victim's KakaoTalk desktop application to distribute malicious payloads to certain contacts.
The activity has been attributed by South Korean threat intelligence firm Genians to a hacking group referred to as Konni.
"Initial access was achieved through a spear-phishing email disguised as a
The Hacker News
Sensitive French Government Agents’ Data Leaked on Darknet Forum
3 months 3 weeks ago
You must login to view this content
cohenido
德国法庭裁决 TCL 的 QLED 不是真的 QLED
3 months 3 weeks ago
德国的一家法庭裁决 TCL 误导消费者，它的多款宣称“量子点电视（QLED）”的产品并不是真的 QLED，没有提供 QLED 电视应有的色彩还原。法院命令 TCL 停止在德国宣传或销售相关型号的电视机。相关诉讼由韩国公司韩松化学提起，它是 TCL 竞争对手三星的合作伙伴。韩松化学委托进行的测试显示，三款以量子点名义出售的 TV 都未检测出铟和镉，它们是不可或缺的量子点材料。TCL 对测试结果提出异议，称量子点含量因供应商而异，它公布了自己的测试结果。TCL 的测试结果与韩松化学的测试结果相矛盾，但双方采用了不同的测试方法：TCL 的测试侧重于其使用的量子点薄膜，而韩松化学测试的是 TCL 电视机。韩松化学在包括美国在内的多国提起了针对 TCL 的诉讼，另一家中国电视制造商海信也面临类似的诉讼。
CUDA Agent：面向高性能 CUDA 内核生成的大规模智能体强化学习
3 months 3 weeks ago
作者：Weinan Dai, Hanlin Wu, Qiying Yu等
译者：知道创宇404实验室翻译组
原文链接：https://arxiv.org/html/2602.24286v1
摘要
GPU内核优化是现代深度学习的基础，但仍是一项高度专业化的任务，需要深厚的硬件专业知识。尽管大语言模型（LLM）在通用编程任务中表现出色，但在CUDA内核生成方面，仍无法与基于编译器的系统（如tor...
The Global Takedown: Interpol’s Operation Synergia III Crushes 45,000 Malicious Servers
3 months 3 weeks ago
An international law enforcement crusade against cybercriminality has yielded monumental results. Constabularies spanning dozens of sovereign nations have
The post The Global Takedown: Interpol’s Operation Synergia III Crushes 45,000 Malicious Servers appeared first on Penetration Testing Tools.
ddos
Lazarus, AI, and Trust Abuse: Top Enterprise Cybersecurity Risks 2026
3 months 3 weeks ago
As part of a recent live expert panel, ANY.RUN together with threat researcher and ethical hacker Mauro Eldritch explored biggest security risks companies should be prepared for in 2026. The discussion covered several relevant cases, from the Lazarus IT Workers operation to the rapid rise of AI-driven phishing attacks, and examined the common thread behind them: trust abuse. Below are the key takeaways for those seeking a clearer view of […]
The post Lazarus, AI, and Trust Abuse: Top Enterprise Cybersecurity Risks 2026 appeared first on ANY.RUN's Cybersecurity Blog.
ANY.RUN
Capturing the Storm: British Tourist Arrested in Dubai After Filming Iranian Missile Barrage
3 months 3 weeks ago
In Dubai, a British national has been apprehended, facing accusations of transgressing local cybercrime ordinances. According to British
The post Capturing the Storm: British Tourist Arrested in Dubai After Filming Iranian Missile Barrage appeared first on Penetration Testing Tools.
ddos