Aggregator

Investigations into the Nx "s1ngularity" NPM supply chain attack have unveiled a massive fallout, with thousands of account tokens and repository secrets leaked. [...]

Urgent security alert for SAP users! A critical vulnerability (CVE-2025-42957) allows attackers to take full control of your…

Reddit提示用户IP地址请求过多，访问受限，请等待几分钟后重试。若问题持续可联系客服并提供账户及代码3baebaef-51ad-49cd-84b7-c0291dc97d0e。

Qantas cuts executive bonuses by 15% after a July cyberattack exposed data of 5.7M people, despite reporting $1.5B profit last fiscal year. Qantas cuts executive bonuses by 15% after a July cyberattack that exposed data of 5.7M people, despite posting $1.5B profit in the last fiscal year. This case study demonstrates that a security breach […]

Reddit因IP地址请求过多限制访问，建议等待并提供联系方法解决问题。

A vulnerability labeled as critical has been found in itsourcecode Online Discussion Forum 1.0. This affects an unknown function of the file /admin/admin_forum/add_views.php. Executing manipulation of the argument ID can lead to sql injection. This vulnerability is registered as CVE-2025-10068. It is possible to launch the attack remotely. Furthermore, an exploit is available.

Submit #644077 / VDB-322991

Новая «супергруппа» хакеров заявила о праве диктовать условия Google.

GhostAction supply chain attack hit 817 GitHub repositories, stealing 3,325 secrets including npm, PyPI, and DockerHub tokens.

喜报 | 我实验室在第十八届全国大学生信息安全竞赛中再获佳绩

From MechaHitler to Islamic Chatbots, AI Engines Are Writing the Script for Reality
AI sovereignty is the new data sovereignty, except now we’re arguing not just about who owns your data, but who gets to define reality. From MechaHitler to Islamic chatbots, AI is less about objective truth and more about who gets to write the script.

Suits Filed After Researcher Found 1 Million Patient Records With No Password Setup
An Ohio firm that assists individuals in obtaining physician-certified medical marijuana cards is facing at least six proposed federal class action lawsuits so far involving the recent discovery by a security researcher of a database exposing nearly one million sensitive patient records on the web.

White House Kick Off School Year With AI Education Efforts, Public-Private Collabs
The Trump administration is rolling out its Presidential Artificial Intelligence Challenge with a series of high-profile White House events and public-private sector commitments - just as the Federal Trade Commission reportedly prepares to investigate AI systems' impact on child mental health.

Also: Software Supply Chain Risks, Cato's AI Security Buy
In this week's update, four ISMG editors discussed the Pentagon's review of Microsoft's use of Chinese nationals on U.S. military cloud systems, renewed concerns over software supply chain risks and Cato Networks' first-ever acquisition to boost AI security.

Series E Funding at $2B Valuation Fuels Fraud Defense, Identity Tech Buildout
Washington D.C.-area identity verification provider ID.me has raised $340 million to develop fraud-fighting technology and prepare for long-term expansion. The investment supports product innovation to stop AI threats such as deepfakes and fake businesses.