Aggregator

8月20日上午10:00，报告主题基于路径覆盖的符号执行路径优先探索策略，可腾讯会议线上参加

8月1日，由中国信息安全测评中心牵头制定的国家标准 GB/T 45940-2025《网络安全技术 网络安全运维实施指南》正式获批发布，将于2026年2月1日正式实施。

WinRAR без патча проживёт в безопасности максимум сутки.

关键词漏洞《连线》昨日（8 月 6 日）发布博文，报道称安全研究人员在 OpenAI 的连接器（Connect

关键词漏洞8 月 9 日消息，科技媒体 bleepingcomputer 昨日（8 月 8 日）发布博文，提醒

关键词数据泄露近日，据外媒 Gbhackers报道，黑客组织 Tsar0Byte 在暗网论坛 DarkForu

当前环境异常，请完成验证后继续访问。

当前环境出现异常问题,需完成验证后方可继续访问,具体验证方法已提供,请按指引操作解决问题。

当前环境出现异常问题，需完成验证后方可继续访问。

The winners of the AI Cybersecurity Challenge (AIxCC), Team Atlanta, won a $4m prize

Microsoft security researchers have uncovered four critical vulnerabilities in Windows BitLocker that could allow attackers with physical access to bypass the encryption system and extract sensitive data. The findings, revealed in research dubbed “BitUnlocker,” demonstrate sophisticated attack methods targeting the Windows Recovery Environment (WinRE) to circumvent Microsoft’s flagship data protection technology. Security Flaws Target Windows […]

The post Multiple Zero-Day Exploits Discover That Bypass BitLocker, Exposing All Encrypted Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

01.NET内网安全攻防报刊小报童电子报刊【.NET内网安全攻防】也正式上线了，引入小报童也是为了弥补知识星球

Металлический гигант из Inconel, который родился за одну печать.

Another day, another AI data exfiltration exploit. Today we talk about OpenHands, formerly referred to as OpenDevin. It’s created by All-Hands AI. The OpenHands agent renders images in chat, which enables zero-click data exfiltration. Simon Willison recently gave this data exfiltration attack pattern a great name: Lethal Trifecta. We discuss this specific image based attack technique frequently. Sometimes a message must be repeated multiple times to raise awareness and become mainstream knowledge.

文章描述了OpenHands AI工具中的零点击数据外泄漏洞，攻击者通过提示注入技术绕过模型的安全限制，窃取GitHub令牌等敏感信息。尽管厂商未及时修复漏洞，但最终公开披露并建议限制加载可信域的图片以缓解风险。

注意常见的隐藏参数

The cybersecurity community faces a significant threat as scanning data reveals over 28,000 unpatched Microsoft Exchange servers remain exposed on the public internet, vulnerable to a critical security flaw designated CVE-2025-53786. This high-severity vulnerability, which carries a CVSS score of 8.0 out of 10, enables attackers with administrative access to on-premises Exchange servers to escalate […]

The post Over 28,000 Microsoft Exchange Servers Exposed Online to CVE-2025-53786 Vulnerability appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

看雪论坛作者ID：默文