Aggregator

Мы думали, «синяя галочка» — это верификация, а X превратил её в VIP-пропуск для пропагандистов.

《人工智能安全治理框架2.0》的解读

当前环境出现异常状态，用户需完成验证流程后方可继续访问相关内容或功能。

Ventoy работает как надо, BIOS меню понятнее, старт без сюрпризов.

Mandiant和Google追踪到一起新的勒索活动，高管收到声称从Oracle系统窃取敏感数据的邮件。活动始于9月底，邮件来自多个被黑账户，可能与Clop团伙有关。目前尚无确凿证据证明数据被盗。

PhoneSploit Pro An All-In-One hacking tool is written in Python to remotely exploit Android devices using ADB (Android Debug

The post PhoneSploit-Pro: remotely exploit Android devices using ADB and Metasploit-Framework appeared first on Penetration Testing Tools.

DSG-22.6 GHz是一款即将发布的紧凑型手持式开源射频信号发生器，覆盖300 MHz至22.6 GHz频率范围，具备1 Hz调谐分辨率和40 dBc谐波水平。其输出功率从15 dBm至-50 dBm可调。该设备适用于测试SDR和其他无线电设备，并在 Crowd Supply 平台进行众筹预发布。

A newly identified cyber-espionage group, Phantom Taurus, linked to China, has spent the past two and a half

The post Phantom Taurus: New Chinese APT Emerges with Fileless NET-STAR Backdoor Targeting Global Governments and Telecoms appeared first on Penetration Testing Tools.

Researchers at Varonis have reported the emergence of a new toolkit named MatrixPDF, which enables attackers to transform

The post MatrixPDF: New Toolkit Turns Ordinary PDFs Into Interactive Phishing Lures That Bypass Gmail appeared first on Penetration Testing Tools.

The Chinese company DeepSeek has unveiled an experimental version of its language model, DeepSeek-V3.2-Exp, which for the first

The post DeepSeek Unveils Sparse Attention: A New LLM Architecture That Slashes AI API Costs by 50% appeared first on Penetration Testing Tools.

Researchers at Tenable have disclosed three vulnerabilities in Google’s Gemini AI, flaws that enabled data theft and remote

The post Gemini Trifecta: Three Flaws Allowed Hackers to Exploit Google’s AI for Stealthy Data Theft appeared first on Penetration Testing Tools.

Профсоюз SAG-AFTRA требует остановить наступление синтетических артистов.

Mandiant和Google追踪到一起针对企业高管的新勒索活动，声称从Oracle E-Business Suite系统中窃取了敏感数据。攻击者利用大量被黑邮箱发送威胁邮件，并可能与Clop勒索团伙相关联。

Zed Industries has released a public beta of its code editor for Windows—a pivotal milestone for the Rust-based

The post VS Code Rival Zed Hits Windows Public Beta, Bringing Rust-Powered Speed to the #1 Dev Platform appeared first on Penetration Testing Tools.

Mandiant and Google are tracking a new extortion campaign where executives at multiple companies received emails claiming that sensitive data was stolen from their Oracle E-Business Suite systems [...]

The global financial system is undergoing one of its most profound shifts in decades. SWIFT, the backbone of

The post SWIFT Launches Blockchain-Based Infrastructure to Transform Global Cross-Border Payments appeared first on Penetration Testing Tools.

More than 48,000 Cisco ASA and Firepower Threat Defense (FTD) firewalls remain unprotected against two critical vulnerabilities that

The post 48,000 Cisco Firewalls Remain Exposed to Active Zero-Day Attacks, Shadowserver Finds appeared first on Penetration Testing Tools.

A team of researchers has developed a simple hardware tool that calls into question the very foundations of

The post $50 Hardware Attack Bypass: Researchers Expose Critical Flaw in Intel SGX and AMD SEV-SNP Trusted Computing appeared first on Penetration Testing Tools.

文章探讨了在Command and Control (C2)系统中使用高信誉重定向器的原因及其设计原理，并详细介绍了如何利用AWS、Azure和GCP等云服务创建这些重定向器以隐藏C2通信。文中还讨论了域名前端化技术及其局限性，并提供了多种云服务的分类及配置方法以实现高信誉重定向功能。

Fraudsters have discovered a new method of targeting elderly users by exploiting fake Facebook events and a malicious

The post Datzbro Trojan: Spyware-Banking Malware Hijacks Seniors’ Devices with Fake Facebook Lures appeared first on Penetration Testing Tools.