Aggregator

文章探讨了无密码身份验证的概念及其优势。通过生物识别、安全密钥或一次性代码等替代因素取代传统密码，该方法提升了安全性并改善了用户体验。然而，也面临新的钓鱼攻击和设备被破解的风险。

Explore passwordless authentication methods, benefits, and implementation strategies. Learn about biometrics, hardware tokens, and how to enhance security and user experience.

The post Passwordless Authentication Explained appeared first on Security Boulevard.

Google has issued a broad security alert to its 2.5 billion Gmail users, advising them to enhance their account security in the wake of a data breach involving one of the company’s third-party Salesforce systems. The incident, which occurred in June 2025, has escalated concerns over sophisticated phishing campaigns targeting a massive user base. In […]

The post Google Warns 2.5B Gmail Users to Reset Passwords Following Salesforce Data Breach appeared first on Cyber Security News.

Steam在英国实施信用卡绑定年龄验证机制，用户需绑卡并完成验证才能访问成人游戏。绑卡后无法取消，否则将重新限制访问。每张卡仅限绑定一个账户，并且只有年满18岁的用户才能申请信用卡。

I got my phone back from the police after it was seized in a search warrant. After sta

Новое исследование: для ветеранов ИИ — напарник, для новичков — головная боль.

微软发布Windows 11 25H2预览版，作为次要更新提供新功能和改进。使用Release Preview通道的用户可通过Windows更新手动下载升级。下周将发布ISO镜像供手动测试。该版本删除部分旧功能，并支持商业用户通过企业版和WSUS获取更新。

Либо верь промокоду, либо прощайся с криптой — Gambler Panel превращает игру в кассу.

WhatsApp修复了可能导致零日攻击的安全漏洞CVE-2025-55177，并指出该漏洞可能与苹果的CVE-2025-43300结合使用。受影响版本包括iOS和Mac的WhatsApp应用。建议受影响用户重置设备并更新软件以防范威胁。

WhatsApp has addressed a security vulnerability in its messaging apps for Apple iOS and macOS that it said may have been exploited in the wild in conjunction with a recently disclosed Apple flaw in targeted zero-day attacks. The vulnerability, CVE-2025-55177 (CVSS score: 5.4), relates to a case of insufficient authorization of linked device synchronization messages. Internal researchers on the

《机械迷城》是一款经典冒险解谜游戏，本周在Epic商店限时免费领取。玩家将扮演小机器人Josef，在机械城市中通过解谜和机关拯救被绑架的女友Berta，并阻止邪恶机器人的炸弹阴谋。游戏以温暖的手绘风格和无对白叙事呈现独特世界。

埃隆·马斯克旗下xAI推出编码模型Grok Code Fast 1，辅助开发者编写代码并修复错误。该模型基于编程语料库训练，支持多种编程语言，在低监督下高效完成任务。目前通过Cursor、GitHub Copilot等平台限时免费提供，并计划推出新版本以增强功能。

微软调查报告确认Windows 11更新与固态硬盘掉盘事件无关。部分用户反映安装更新后硬盘故障，表现为格式化为RAW且无法识别。微软称未发现关联性，并将持续关注反馈。问题可能与硬件组合或软件有关。用户需谨慎处理大量数据写入操作以避免故障。

As part of the Month of AI Bugs, serious vulnerabilities that allow remote code execution via indirect prompt injection were discovered. There was a period of a few weeks where multiple arbitrary code execution vulnerabilities existed in popular agents, like GitHub Copilot, Amazon Q, AWS Kiro,… During that time I was wondering if it would be possible to write an AI virus. Hence the idea of AgentHopper was born.

本文介绍了AgentHopper项目，一种基于AI的恶意软件概念验证。通过利用GitHub Copilot等工具中的漏洞，该恶意软件可自动传播并感染开发者的代码库。研究展示了AI工具的安全风险，并提供了防护建议。

Currently trending CVE - Hype Score: 16 - In gpu_pixel_handle_buffer_liveness_update_ioctl of private/google-modules/gpu/mali_kbase/mali_kbase_core_linux.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. ...

一个Reddit社区r/netsecstudents为网络安全学生提供资源分享、问题解答和互助学习的平台。一位用户询问是否有其他学生愿意分享课程大纲和实验室项目，以帮助他准备CCNA考试并获取更多实验思路。

用户在旧硬盘中发现多个iTunes备份文件夹（2012-2015年），但只能成功恢复2015年的备份。尝试复制文件夹、使用第三方工具等方法均未成功恢复更早数据。主要目标是恢复旧照片和短信用于法律用途，并愿意付费寻求专业帮助。

The U.S. Attorney’s Office for the District of New Mexico announced Thursday that federal authorities have executed a court-authorized seizure of two domain names and one affiliated blog associated with VerifTools, an online marketplace peddling counterfeit driver’s licenses, passports, and other state- and country-issued identity documents.  Operating under the banner of VerifTools since 2020, the […]

The post U.S. Government Seizes Online Marketplaces Used to Sell Fraudulent Identity Documents to Cybercriminals appeared first on Cyber Security News.

Revenge AI 是一个基于 AI 的云逆向工程平台，通过智能模型和算法提前分析并阻止威胁。与昂贵的传统工具不同，该 SaaS 平台按需付费，提供更准确的结果和高效决策支持。