Aggregator

Personal data of Nippon Steel Solutions’ customers, partners and employees may be compromised

英国国家犯罪局逮捕四人，涉嫌参与今年针对英国零售商的勒索软件攻击。被捕者包括一名20岁英国女子、一名19岁拉脱维亚男子、一名19岁英国男子和一名17岁英国男子。他们被指控犯有计算机滥用、敲诈、洗钱和参与有组织犯罪集团等罪名。调查仍在继续，以确保责任人被绳之以法。

恶意开源包攻击正成为加密行业重大威胁。攻击者通过伪装合法工具发布恶意扩展包窃取加密资产。本文揭示一起区块链开发者因安装伪装Solidity语法高亮的恶意VS Code扩展而损失50万美元的案例。该扩展通过伪造高下载量、利用开源仓库排名算法漏洞，在搜索结果中排名靠前。一旦安装即下载PowerShell脚本并执行远程控制软件窃取数据。类似攻击表明区块链开发者面临持续威胁。

Как превратить древнюю медицину в повод для казни.

Brave has taken a significant step toward empowering privacy-conscious Android users by making its browser fully available through its own F-Droid repository, providing an alternative distribution method that bypasses Google Play Store entirely. According to the recent report, this strategic move addresses growing concerns about Big Tech’s control over app distribution and offers users greater […]

The post Brave Browser For Android via F‑Droid: Now Fully Available appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

多云环境虽能提供灵活部署等优势，但暴露的安全弱点可能迅速抵消其效益。

Bruce Schneier是一位专注于安全、技术和人之间交叉领域的公共利益技术专家。他自2004年起在博客上撰写安全问题，并自1998年起发布月度通讯。目前担任哈佛大学肯尼迪学院研究员和讲师、EFF董事会成员以及Inrupt公司的安全架构首席。其个人网站观点不代表上述组织。

The Rhadamanthys Stealer, a highly modular information-stealing virus that was first discovered in 2022, has made a comeback with a clever and dishonest delivery method called ClickFix Captcha. This is a terrifying development for cybersecurity experts. This technique disguises malicious payloads behind seemingly legitimate CAPTCHA interfaces, tricking users into executing sophisticated malware. Leverages CAPTCHA Disguise […]

The post Rhadamanthys Infostealer Uses ClickFix Technique to Steal Login Credentials appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

建议对核心函数增加重入锁保护，并严格限制单一因素对价格的直接影响程度。

当前环境异常，需完成验证后方可继续访问。

Britain's National Crime Agency said police arrested one woman and three men suspected in ransomware attacks against major U.K. retailers.

CodeWisdom团队最新分享：真正的智能，需要“直觉”与“理性”的完美联姻。

关键词数据泄露全球最大快餐连锁品牌麦当劳近日曝出严重数据泄露事件。

关键词Teams今日，微软旗下核心办公协作平台Teams突发大规模服务中断，全球多个国家和地区的企业用户报告无

关键词Tik Tok2025 年 1 月起，《保护美国人免受外国对手控制应用法案》（Protecting Am

关键词国家安全国家安全部7月10日通报，近期破获多起境外间谍情报机关针对我国公职人员的渗透策反案件，现披露三起

Generative AI is not arriving with a bang, it’s slowly creeping into the software that companies already use on a daily basis. Whether it is video conferencing or CRM, vendors are scrambling to integrate AI copilots and assistants into their SaaS applications. Slack can now provide AI summaries of chat threads, Zoom can provide meeting summaries, and office suites such as Microsoft 365 contain

生成式AI正逐步融入企业日常使用的软件中，如视频会议和CRM系统。虽然提升了生产力，但也带来了数据安全、隐私和合规性等风险。企业需建立有效的AI治理框架以应对这些挑战，并通过工具如Reco简化管理流程。

文章介绍了英国国家网络安全中心（NCSC）发布的API安全最佳实践指南，涵盖了安全开发、认证授权、数据保护等七个核心支柱，并结合Wallarm平台的功能说明如何实现这些安全措施。

Cybersecurity researchers have discovered new artifacts associated with an Apple macOS malware called ZuRu, which is known to propagate via trojanized versions of legitimate software. SentinelOne, in a new report shared with The Hacker News, said the malware has been observed masquerading as the cross‑platform SSH client and server‑management tool Termius in late May 2025. "ZuRu malware