Posts of last few hours

三季度中国手机出货量下跌 15.4%
根据 IDC 的数据，三季度全球智能手机出货量同比下降 22% 至 2.553 亿部。受内存价格上涨影响，手机价格上升，出货量降幅创历史最高。IDC 预测未来智能手机市场还将进一步下滑。根据 IDC 的数据，三季度中国智能手机市场出货量约为 5790 万台，同比下降 15.4%。华为是唯一实现同比双位数增长的头部品牌。华为份额升至 21.1%，同比增长 17.3%；其次是苹果的 17.8%，同比下跌 4.3%；之后是 OPPO、vivo、小米、荣耀、WIKO、联想（市场份额 0.4%，同比增长 1.1%）、三星和中兴。除了华为和联想，主要手机厂商的出货量都下跌。

https://www.solidot.org/story?sid=85630
Zero-day, root и невидимый туннель. Китайские кибершпионы захватили BeyondTrust
За ответом несуществующей страницы прятался инструмент удалённого управления сервером.
https://www.securitylab.ru/news/578803.php
12 Best Mobile Application Security Testing Tools Compared (2026): Features & Pricing

NowSecure and Data Theorem mobile security lead automated mobile testing, Guardsquare owns shielding/obfuscation, and Corellium’s virtual devices changed what deep mobile research costs. Twelve options across testing, shielding, virtualization, and runtime lanes mapped to MASVS so the acronyms mean something. Quick Verdict: Best Mobile AppSec at a Glance • Best automated testing: NowSecure (pipeline MAST) […]

The post 12 Best Mobile Application Security Testing Tools Compared (2026): Features & Pricing appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

https://gbhackers.com/best-mobile-appsec-compared/
12 Best SBOM Tools Compared (2026): Features & Pricing

Anchore’s Syft SBOM generator is the free generation standard, FOSSA and Cybeats lead SBOM management, and Finite State owns the embedded/OT depth regulators now demand. Twelve options across generation, management, and monitoring lanes with CycloneDX honestly framed as the OWASP standard powering much of it rather than a vendor to shortlist. Quick Verdict: Best SBOM […]

The post 12 Best SBOM Tools Compared (2026): Features & Pricing appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

https://gbhackers.com/best-sbom-compared/
【通知】关于陌陌安全暂停接收安全漏洞的通知
重要通知！
https://mp.weixin.qq.com/s?__biz=MzI2OTYzOTQzNw==&mid=2247489668&idx=1&sn=3947b4d878425a1fb03e4146d691a5ac
12 Best CI/CD Pipeline Security Tools Compared (2026): Features & Pricing

Your CI platform’s native controls (GitHub Advanced Security, GitLab Ultimate) are the baseline, Cycode and Legit lead dedicated pipeline posture, and StepSecurity owns the runner-hardening niche attackers actually exploit. Twelve options across native, dedicated, hardening, and platform-absorbed lanes because the factory is now the target. Quick Verdict: Best CI/CD Security at a Glance • Native […]

The post 12 Best CI/CD Pipeline Security Tools Compared (2026): Features & Pricing appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

https://gbhackers.com/best-cicd-security-compared/
Positive Security Day 2026. День 2
Смотрите главную ежегодную технологическую  конференцию Positive Technologies
https://www.securitylab.ru/news/578807.php
诚邀渠道合作伙伴共启新征程
https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247538316&idx=3&sn=01cdb04267bb0375b10466bb749fac1c
【火绒安全周报】欧洲多家连锁超市遭黑客攻击/国内某智能插排厂商遭黑客攻击
【火绒安全周报】欧洲多家连锁超市遭黑客攻击/国内某智能插排厂商遭黑客攻击
https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247538316&idx=2&sn=f2520ac0ba2706e8762e894ef558ef98
火绒小问答——「企业版」资产登记
火绒小问答——「企业版」资产登记
https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247538316&idx=1&sn=82af1129f861dd8781860cf5573b017f
日本准备于 20 日发射火星探测器
日本宇宙航空研究开发机构（JAXA）将于 10 月 20 日凌晨发射火星卫星探测器“MMX”。任务目标是登陆火星卫星“火卫一”并采集样本。MMX 将历时约 1 年抵达火星圈，并登陆火卫一。任务计划利用机械臂采集 10 克以上土壤。预计于 2031 年返回地球。法国和德国联合研发的探测车将先行登陆火卫一。该探测车搭载于 MMX 上，将与其分离并投放。探测车为边长约 50 厘米的立方体，重约 23 公斤。探测车将通过车轮在火卫一表面移动，调查温度、成分等，为 MMX 采集样本提供支持。此次探测的最大目标，是解开火卫一如何形成的谜团。目前较受重视的理论包括：来自其他区域的小行星被火星引力捕获；以及巨型陨石撞击火星时飞散的岩石聚集形成火卫一。调查火卫一砂样，很可能为这一争论画上句号。若其源自小行星，或留存有太阳系诞生初期的物质，有望帮助揭示行星形成及生命诞生的过程。

https://www.solidot.org/story?sid=85629
BAE Systems cyberattack disrupts US federal court operations
The Administrative Office of the US Courts says a cyberattack on government contractor BAE Systems has taken down the notice system used by federal bankruptcy courts. [...]
https://www.bleepingcomputer.com/news/security/bae-systems-cyberattack-disrupts-us-federal-court-operations/
CenterPoint Energy Data Breach: More Than 1 Million Texans Affected
The regulated utility company CenterPoint Energy says a data breach exposed the personal information of more than 1 million people in Texas. CenterPoint Energy is a regulated utility company used to deliver natural gas and electricity infrastructure, maintain power grids and pipelines, and restore service across parts of Texas, Indiana, Ohio, and Minnesota. The organization […]
https://securityaffairs.com/201054/cyber-crime/centerpoint-energy-data-breach-more-than-1-million-texans-affected.html
„Луна-25“ передает привет. Россия собралась строить атомную станцию на Луне
Китайские ракеты и российский реактор собирают комбо против американской программы Artemis.
https://www.securitylab.ru/news/578802.php
В кошельках Trezor также обнаружены шпионские чипы
Производитель отрицал проблему, хотя получил доказательства ещё два месяца назад.
https://www.securitylab.ru/news/578800.php
China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servers
The China-nexus cyber espionage group tracked as Armory Castle (previously UNC5221 or Warp Panda) exploited a newly disclosed security flaw in BeyondTrust Remote Support (formerly Bomgar) as a zero-day in late August 2026. The vulnerability, tracked as CVE-2026-102764 (CVSS score: 9.3), is a case of improper origin validation in an internal messaging component that could be exploited by a
https://thehackernews.com/2026/10/china-linked-hackers-exploited.html
react2shell漏洞分析(一)
https://mp.weixin.qq.com/s?__biz=MzU5MTExMjYwMA==&mid=2247485889&idx=1&sn=af8253afd242efae25032bdcef59c942
Weekly Threat Landscape Digest – Week 42

PAN-OS Authenticated RCE via Management Interface (CVE-2026-0322, CVSS 8.6) Overview High-severity RCE (CWE-94) in PAN-OS management interface; allows authenticated attackers […]

The post Weekly Threat Landscape Digest – Week 42 appeared first on HawkEye.

https://hawk-eye.io/2026/10/weekly-threat-landscape-digest-week-42-2/?utm_source=rss&utm_medium=rss&utm_campaign=weekly-threat-landscape-digest-week-42-2
CERT-In Warns AI Agents Accessed Sensitive Data at Indian Organizations During Testing
AI agents being tested online reached the live systems of Indian organizations and read business records, including personal data and confidential material, CERT-In said in an advisory on October 15. The agents went beyond their assigned tasks, and none of the organizations detected the unauthorized access. After internal reviews, the AI companies whose models were being tested
https://thehackernews.com/2026/10/cert-in-warns-ai-agents-accessed.html
ИИ натравят на VPN? В проекте нацплана нашли пункт о блокировках на 95%
В черновике нацплана предлагали отдать блокировки нейросетям.
https://www.securitylab.ru/news/578799.php

Managed ad