Aggregator

国家信息安全漏洞共享平台（以下简称CNVD）本周共收集、整理信息安全漏洞582个，其中高危漏洞307个、中危漏洞215个、低危漏洞60个。

Один спорный отказ поставил под вопрос всю логику вознаграждения за поиск уязвимостей.

中国高校正在大规模课程重组，撤掉了数千个“过时”专业，转而开设以科技为导向的新兴专业。这场教育改革正值中国力争成为众多高科技未来产业的全球领导者，解决严重的毕业生就业危机之际。这场危机已导致数百万年轻人难以找到工作。根据新华社援引教育部的数据，2021-2025 年间，中国高校撤销或暂停了 12200 个本科专业，同时新增了 10200 个专业，意味着逾三成的高校课程进行了调整。

Attackers compromised Awesome Motive CDN files, backdooring WordPress sites running OptinMonster, TrustPulse, and PushEngage. Sansec researchers discovered an active supply chain attack hitting WordPress sites running OptinMonster, TrustPulse, and PushEngage, three plugins operated by Awesome Motive, one of the largest WordPress plugin companies in the world. The malicious JavaScript wasn’t sitting on any victim’s server. […]

黄金是少数几乎不会被氧化的金属之一，但黄金的纳米粒子却能充当催化剂。根据发表在《Physical Review Letters》期刊上的一项研究，科学家指出黄金的惰性并非源于原子本身，而是源于黄金晶体形成的表面。黄金会形成晶体。如果沿着不同的原子平面切割晶体，会得到不同的表面排列。在黄金中，部分平面呈正方晶格，部分平面呈六方晶格。研究人员测试了不同黄金晶体表面对氧分子的吸附能力。结果显示，最常见的六方晶格黄金晶体对氧的吸附力较弱，而正方晶格则很容易吸附氧分子，能促使其发生形变至分裂，在这种情况下黄金被氧化了。

Внутри компании накопилось раздражение, которое уже не получилось спрятать за красивыми обещаниями.

Снаружи — красивый экран, внутри — тихая фабрика трафика.

A vulnerability marked as problematic has been reported in Envoy. The affected element is an unknown function of the component HPACK Compression Handler. The manipulation leads to denial of service. This vulnerability is documented as CVE-2026-47774. The attack can be initiated remotely. There is not any exploit available.

A vulnerability labeled as critical has been found in Softaculous Page Builder Plugin up to 2.0.9 on WordPress. Impacted is an unknown function. Executing a manipulation can lead to incorrect authorization. This vulnerability is registered as CVE-2026-2470. It is possible to launch the attack remotely. No exploit is available.

The Gentlemen ransomware used infostealer credentials, AI tools, and affiliates to hit 483 victims across 66 countries in under a year. The Gentlemen surfaced as a ransomware operation in September 2025 and by June 13, 2026 had listed 483 victims on their dark-web leak site, 380 of them in 2026 alone. That makes them the […]

За кулисами всплыла версия, о которой никто ещё не высказывался публично.

伊利诺伊大学厄巴纳-香槟分校科学家的一项最新研究表明，尽管气候变化带来重重挑战，但全球水稻产量在过去半个世纪依然几乎翻了一番。研究揭示，水稻增产的秘诀并非天公作美，而是人类的管理决策，比如扩大灌溉、增施养料，以及推行能有效提升单产的耕作方式，共同维持了水稻产量，并抵消了气候相关因素带来的损失。这表明，未来的粮食安全不仅取决于环境条件，更取决于人们如何管理和调整水稻生产系统，以适应不断变化的世界。研究揭示，气候变化是导致水稻减产的首要因素。在 2006-2015 年间，因气温升高、热害频发和水资源短缺，全球水稻产量估计减少了 7%。然而大气中二氧化碳浓度的升高也成了主要的增产推手，因为它能增强光合作用、提升水分利用效率。这些发现共同描绘了一幅复杂的图景：环境变化对农业生产的影响是多面的，甚至彼此对立。

Cybersecurity researchers have disclosed details of fraudulent activity targeting users across the Middle East and North Africa by employing various fraudulent Facebook accounts impersonating politicians, public figures, and trusted organizations. "These accounts promoted fake offers, including free mobile internet packages, financial compensation, and government subsidy programs," Group-IB

OpenSSL ProjectからOpenSSL Security Advisory [9th June 2026]が公開されました。

Palo Alto Networks has revealed that it has observed "active exploitation" of a recently disclosed PAN-OS vulnerability by an unknown threat actor to obtain unauthorized access to GlobalProtect portals. The vulnerability in question is CVE-2026-0257 (CVSS score: 7.8), an authentication bypass flaw affecting the portal and gateway components of PAN-OS software that could be exploited by bad