Aggregator

9月17日让我们一起聊技术、谋协作！把安全优势变为可持续发展的硬实力！不见不散！

Cybersecurity researchers have flagged a new technique that cybercriminals have adopted to bypass social media platform X's malvertising protections and propagate malicious links using its artificial intelligence (AI) assistant Grok. The findings were highlighted by Nati Tal, head of Guardio Labs, in a series of posts on X. The technique has been codenamed Grokking. The approach is designed to

360携“网数模一体化”方案亮相东南亚数字大会，筑牢区域数字安全屏障

漏洞预警“时间差”威胁我国网络安全，微软MAPP新规引担忧

让重复的归 AI，让创造的归人类

巴西科学家研究显示，自 1985 年以来亚马孙雨林旱季降雨减少的近75%可归因于森林砍伐。研究该表明，砍伐与全球排放上升造成了亚马孙雨林的转变。亚马孙雨林是地球上最大的热带森林，对维持区域和全球气候稳定发挥关键作用。近几十年来，温室气体排放导致的全球气温上升与森林砍伐的叠加效应，已被证实改变了亚马孙等自然环境的水循环、碳循环和能量循环。巴西圣保罗大学的研究人员分析了 1985-2020 年覆盖亚马孙雨林约 260 万平方公里的卫星数据，量化了森林砍伐和全球气候变化对该地区气候的影响。分析表明，森林砍伐导致每个旱季的雨量减少 15.8 毫米，约占总雨量减少量的 74%。森林砍伐还导致了地表最高气温上升 2℃ 中的 16.5%，其余则归因于全球气候变化。研究人员还预测了亚马孙雨林到 2035 年将升温 2.64℃，每个旱季降雨减少 28.3 毫米。

Story teaser text: Cybersecurity leaders face mounting pressure to stop attacks before they start, and the best defense may come down to the settings you choose on day one. In this piece, Yuriy Tsibere explores how default policies like deny-by-default, MFA enforcement, and application Ringfencing ™ can eliminate entire categories of risk. From disabling Office macros to blocking outbound server

The French data protection authority has fined Google and Chinese e-commerce giant Shein $379 million (€325 million) and $175 million (€150 million), respectively, for violating cookie rules. Both companies set advertising cookies on users' browsers without securing their consent, the National Commission on Informatics and Liberty (CNIL) said. Shein has since updated its systems to comply with

手慢无~

一次付费：终身学习 + 持续更新

AI安全工具遭滥用，零日漏洞攻击加速

战局落幕！本题共11支战队突出重围

CISA updates its KEV List with TP-Link Wi-Fi extender and WhatsApp spyware flaws, urging users and agencies to…

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added two security flaws impacting TP-Link wireless routers to its Known Exploited Vulnerabilities (KEV) catalog, noting that there is evidence of them being exploited in the wild. The vulnerabilities in question are listed below - CVE-2023-50224 (CVSS score: 6.5) - An authentication bypass by spoofing vulnerability

CVE‑2025‑38352 и CVE‑2025‑48543 уже в деле.

欧洲学者基于北约“锁定盾牌”演习分析网络蓝队自动化愿景

客户联系信息和案例数据遭窃取

瑞士发布了完整开源的大模型 Apertus——即不仅公开模型权重，还公开了训练数据集和文档等资料。Apertus 的源代码和训练集都允许商业使用。它的数据集包含了 15 万亿 tokens，涵盖了逾千种语言。Apertus 的开发明确遵守瑞士数据保护和版权法，纳入了可追溯的退出机制以尊重数据源的偏好。用户可通过瑞士官网访问大模型，也可以通过 Hugging Face 和 Public AI Inference Utility 访问。

Как любимые гаджеты постоянно сливают данные о местоположении пользователей, и что с этим можно сделать.