Aggregator

二十年过去了，这场关于监控合法性的法律博弈仍在继续。

因霍尔木兹海峡封锁引发的新一轮能源危机，世界各国正加速向清洁能源转型，最大的绿色技术出口国中国三月的太阳能、电池和电动汽车的出口总额同比增长 70%，其中出口的太阳能装机容量达到 68GW，电池出口额达到 100 亿美元，电动汽车和混合动力汽车出口同比增长 140%。多达 50 个国家从中国进口的太阳能设备都创历史新高。

Череда провальных испытаний не убила программу на полтора миллиарда долларов.

Author, Creator & Presenter: Joey Melo, AI Red Teaming Specialist At CrowdStrike

Our thanks to [un]prompted for publishing their Creators, Authors and Presenter’s outstanding [un]prompted 2026 AI Security Practitioner content on the Organizations' YouTube Channel.

Permalink

The post [un]prompted 2026 – The Parseltongue Protocol: Textual Obfuscation Methods appeared first on Security Boulevard.

2026 年 3 月 Steam 玩家中使用 Linux 比例达到了史无前例的 5.33%，比前一个月增加了一倍多。根据 Valve 公布的 2026 年 4 月 Steam 硬件和软件调查，Steam 用户中使用 Linux 比例回落到了 4.52%，减少 0.81%，但仍然比去年同期翻了一番。Windows 操作系统的比例提高到 93.47%，OSX 占 2.01%。有众多证据表明 Linux 上的游戏表现有了翻天覆地的变化，而 Linux 下游戏的一大特性是需要的资源比 Windows 更少，在今天内存价格飙升的时期显得更有吸引力。其它数据显示：简体中文用户比例占 23.41%，英语用户占 36.77% 。用户使用英特尔 CPU 的比例占 55.81%，AMD 占 44.18%，几乎和前一个月相同。

A vulnerability classified as critical has been found in AudioCodes Device Manager Express up to 7.8.20002.47752. The affected element is an unknown function of the file IPPhoneFirmwareEdit.php. The manipulation of the argument ID leads to sql injection. This vulnerability is traded as CVE-2022-24628. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability was found in AudioCodes Device Manager Express up to 7.8.20002.47752. It has been rated as problematic. This vulnerability affects unknown code of the file ajaxTenants.php. This manipulation of the argument desc causes cross site scripting. This vulnerability is tracked as CVE-2022-24631. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability labeled as problematic has been found in GPAC 1.0.1. Affected by this issue is the function gf_utf8_wcslen. Executing a manipulation can lead to null pointer dereference. This vulnerability is tracked as CVE-2022-24577. The attack is only possible within the local network. No exploit exists.

A vulnerability described as critical has been identified in GPAC 1.0.1. This vulnerability affects the function SFS_AddString of the file bifs/script_dec.c. The manipulation results in heap-based buffer overflow. This vulnerability is cataloged as CVE-2022-24578. The attack must originate from the local network. There is no exploit available.

A vulnerability was found in GPAC 1.0.1. It has been rated as problematic. This impacts the function gf_dump_vrml_field.isra. This manipulation causes null pointer dereference. The identification of this vulnerability is CVE-2022-24574. The attack needs to be done within the local network. There is no exploit available.

A vulnerability labeled as critical has been found in Microsoft Windows. Affected is an unknown function of the component Point-to-Point Tunneling Protocol. The manipulation results in race condition. This vulnerability was named CVE-2022-24504. The attack may be performed from remote. There is no available exploit. Applying a patch is advised to resolve this issue.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a flaw in WebPros cPanel to its Known Exploited Vulnerabilities catalog The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a flaw in Microsoft Defender, tracked as CVE-2026-41940 (CVSS score of 9.3), to its Known Exploited Vulnerabilities (KEV) catalog. cPanel is a widely used web hosting control panel that lets […]