Posts of last few hours
Please support the site operations by clicking ads.
Спустя четверть века выяснилось, почему легендарная комбинация вообще работала.
https://www.securitylab.ru/news/577610.php
Three researchers at the security firm Hacktron used Anthropic's Claude Opus 5 to chain two flaws and take over the ChatGPT and Codex accounts of several OpenAI employees, then reach an internal OpenAI code repository.
The chain began with a bug in the software that runs OpenAI's public help forum and moved through a weakness in OpenAI's own login system.
This was security research,
https://thehackernews.com/2026/09/claude-opus-5-helped-researchers-take.html
Выборы проверяют на прочность не только избиратели.
https://www.securitylab.ru/news/577658.php
Сверхтонкий магнитный материал связал два диапазона, которые мешали объединить квантовые машины в сеть.
https://www.securitylab.ru/news/577583.php
Исследователи нашли способ заранее выбирать древние свитки, которые проще прочитать без разворачивания.
https://www.securitylab.ru/news/577592.php
科学家几百年来一直将大脑视为单一的器官。但斯坦福大学医学院领导的一项新研究发现，大脑实际上由两个不同的器官构成，它们在数亿年里独立演化。这一发现推翻了大脑发育的主流模型。研究人员过去一直认为，在发育早期存在一个单一的祖细胞（progenitor cell），由此诞生了整个大脑。它暗示大脑的所有部分都有共同的发育起源。新的研究发现，人脑由两个古老的神经系统巧妙地结合而成——其中较原始的部分负责调节心跳、呼吸及其他生理功能；另一部分则赋予了人类特有的能力，使得人类能进行诗歌创作、数学运算以及思科自身的起源。研究人员通过观察发育中的小鼠胚胎识别出了两种不同的脑祖细胞：一种表达 Otx2 基因，发育成前脑和中脑；另一种表达 Gbx2 基因，发育成后脑。研究表明，两类细胞群从不重叠，在发育的最早阶段彼此就是互斥的。
https://www.solidot.org/story?sid=85426
CEA превращает Qaptiva в универсальный слой для суперкомпьютеров и разных квантовых процессоров.
https://www.securitylab.ru/news/577575.php
Name: NullOrigin CTF Qualifiers (an Null Origin event.)
Date: Sept. 18, 2026, 4:30 a.m. — 18 Sept. 2026, 16:30 UTC [add to calendar]
Format: Jeopardy
On-line
Location: On-line
Offical URL: https://nullorigin.cyberhx.com/
Rating weight: 0
Event organizers: CyberXoX
Date: Sept. 18, 2026, 4:30 a.m. — 18 Sept. 2026, 16:30 UTC [add to calendar]
Format: Jeopardy
On-line
Location: On-line
Offical URL: https://nullorigin.cyberhx.com/
Rating weight: 0
Event organizers: CyberXoX
https://ctftime.org/event/3346
Name: Haruulzangi CTF 2026 Semi-Final (an Haruulzangi CTF event.)
Date: Sept. 19, 2026, 2 a.m. — 19 Sept. 2026, 08:00 UTC [add to calendar]
Format: Jeopardy
On-site
Location: Mongolia, Ulaanbaatar
Offical URL: https://2026.haruulzangi.mn/
Rating weight: 0.00
Event organizers: haruulzangi-organizers
Date: Sept. 19, 2026, 2 a.m. — 19 Sept. 2026, 08:00 UTC [add to calendar]
Format: Jeopardy
On-site
Location: Mongolia, Ulaanbaatar
Offical URL: https://2026.haruulzangi.mn/
Rating weight: 0.00
Event organizers: haruulzangi-organizers
https://ctftime.org/event/3431
Name: z0d1ak CTF Finals (an z0d1ak CTF event.)
Date: Sept. 19, 2026, 3:30 a.m. — 19 Sept. 2026, 12:30 UTC [add to calendar]
Format: Jeopardy
On-site
Location: VIT Vellore, India
Offical URL: https://ctf.z0d1ak.org/
Rating weight: 0.00
Event organizers: z0d1ak
Date: Sept. 19, 2026, 3:30 a.m. — 19 Sept. 2026, 12:30 UTC [add to calendar]
Format: Jeopardy
On-site
Location: VIT Vellore, India
Offical URL: https://ctf.z0d1ak.org/
Rating weight: 0.00
Event organizers: z0d1ak
https://ctftime.org/event/3428
Name: OmniCTF 2026 Finals (an OmniCTF event.)
Date: Sept. 19, 2026, 6 a.m. — 19 Sept. 2026, 16:00 UTC [add to calendar]
Format: Jeopardy
On-site
Location: Romania, Constanța
Offical URL: https://omnictf.com/
Rating weight: 0.00
Event organizers: OmniCTF
Date: Sept. 19, 2026, 6 a.m. — 19 Sept. 2026, 16:00 UTC [add to calendar]
Format: Jeopardy
On-site
Location: Romania, Constanța
Offical URL: https://omnictf.com/
Rating weight: 0.00
Event organizers: OmniCTF
https://ctftime.org/event/3401
Android 安全加固项目 GrapheneOS 披露，Google 向其旗舰手机 Pixel 推送了 Android 17 QPR1 更新，引入了新 API。而这些 API 没有提供给 Android 开源项目(AOSP)，这是自 Android Honeycomb (3.x) 以来从未有过的情况。新 API 为 Pixel 限时独占，其它 Android OEM 厂商无法获得。Google 现在只向 AOSP 项目提供年度版本和第二个季度更新版本 QPR2，第一个和第三个季度更新版本 QPR1 和 QPR3 都是 Pixel 独占。新 API 将通过 2026 年 12 月释出的 QPR2 提供给 AOSP 和 OEM 厂商。GrapheneOS 称，Pixel 通过固件移除了对安全特性 MTE 的支持，但硬件上仍然保留了 MTE。GrapheneOS 再次抱怨它对 Pixel 的支持变得日益困难，称与摩托罗拉的合作会更顺利。
https://www.solidot.org/story?sid=85425
时间这个东西，平时谁也不会多想。手机上的时钟、电脑右下角的数字，好像天生就该是对的。
https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451188860&idx=1&sn=0be1615627475a59dca7d45ba5a12b1b
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has warned that attackers are actively exploiting three Linux kernel vulnerabilities, creating an urgent patching and investigation deadline. CISA added CVE-2025-39682, CVE-2026-53266, and CVE-2025-39964 to its Known Exploited Vulnerabilities catalog on September 18, 2026, with remediation required by September 21 under Binding Operational Directive 26-04. The KEV […]
The post CISA Warns of Linux Kernel Vulnerabilities Actively Exploited in Attacks appeared first on Cyber Security News.
https://cybersecuritynews.com/linux-kernel-vulnerabilities-actively-exploited/
Астрономы нашли газовый гигант возрастом менее миллиона лет.
https://www.securitylab.ru/news/577591.php
BragJack, a proof-of-concept attack from Forever Security's Gal Weizman, hijacks the AI assistants in Chrome, Edge, Opera Neon, Perplexity Comet, and Claude in Chrome using one malicious extension. The Prompt Forcing technique earned over $20,000 in bounties and two CVEs. [...]
https://www.bleepingcomputer.com/news/security/bragjack-attacks-hijack-ai-browser-agents-through-malicious-extensions/
Google Gemini escaped a cyber test environment, reached three real companies, and exposed why AI security tests need strict isolation. Google has confirmed that one of its Gemini models broke into the systems of three real companies during a cybersecurity test in May. The incident is the first publicly known case in which a Google […]
https://securityaffairs.com/199392/ai/google-gemini-also-broke-out-of-its-test-environment.html
Архитектура приложения позволяет контролировать трафик, данные авторизации и содержимое встроенных сервисов.
https://www.securitylab.ru/news/577646.php
A joint law enforcement advisory warns that the North Korean hacking group WaterPlum compromised at least 30,000 devices worldwide from December 2025 through July 2026 and transferred more than $10.7 million in stolen cryptocurrency to North Korea. [...]
https://www.bleepingcomputer.com/news/security/north-korean-waterplum-hackers-infected-30-000-devices-worldwide/
https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247497178&idx=1&sn=bc85ee18b9552d272157a8c07ffcda05
Latest Blog Posts
- 4 weeks ago
- 2 months 4 weeks ago
- 2 months 4 weeks ago
- 2 months 4 weeks ago
- 3 months ago
- 7 months 3 weeks ago
- 1 year 1 month ago
- 1 year 1 month ago
- 1 year 2 months ago
- 1 year 6 months ago