Aggregator

Google has officially promoted Chrome 140 to the stable channel, initiating a multi-platform rollout for Windows, Mac, Linux, Android, and iOS. The update brings the usual stability and performance improvements, but the headline feature is a critical security patch addressing six vulnerabilities, including one high-severity flaw that could allow for remote code execution. Users are […]

The post Chrome 140 Released With Fix For Six Vulnerabilities that Enable Remote Code Execution Attacks appeared first on Cyber Security News.

受影响机构名单仍在拉长

最后一题，冲呀～

捷豹路虎遭网攻，全球 IT 系统受影响

看雪论坛作者ID：Yangser

武汉科锐——将作为黄金合作伙伴盛大出席峰会

Новые чемпионы считают быстрее, чем думали все люди на Земле 50 лет назад.

当前环境异常需完成验证后方可继续访问。

当前环境异常，请完成验证以继续访问。

当前环境出现异常,需完成验证后方可继续访问。

当前环境出现异常问题，需完成验证后方可继续访问。

AI 网络犯罪，已进入全自动时代。

欧盟法院驳回一起针对数据隐私框架的诉讼请求，认可美国数据保护机制与欧洲相当，并允许情报机构在事后监督下收集数据。尽管该框架通过考验，但需应对未来法律变化带来的潜在风险。

文章揭示了AI供应链中的重大漏洞——Model Namespace Reuse，允许攻击者通过重新注册已删除或转移的模型名称，在Azure AI Foundry、Google Vertex AI等平台及开源项目中部署恶意模型并获得远程代码执行能力。该问题源于Hugging Face平台对模型命名空间的管理机制。文章建议通过版本固定、模型克隆和扫描等措施提升AI安全防护能力。

Researcher: Internal Data Belonging to World’s Largest Lender Exposed on AWS
Navy Federal, the world’s largest credit union, left hundreds of gigabytes of internal backup files exposed on Amazon’s cloud storage service, says cybersecurity researcher Jeremiah Fowler. Exposed data included email addresses, hashed passwords and what appeared to be internal system data.

Acquisition Targets Business Email Compromise, Impersonation and Spear-Phishing
Varonis has acquired SlashNext to strengthen detection of phishing and social engineering attacks. The integration will help prevent identity compromises via email, SMS and collaboration tools while enhancing Miami-based Varonis’ AI-driven data protection.

Orthopedic Group, Medical Imaging Centers, Home Healthcare Provider Report Breaches
Specialty healthcare providers know what they're about when it comes to an irregular heartbeat or a wheezing lung. Cybersecurity, not so much. Hacks on specialty medical entities easily result in tens of thousands, if not hundreds of thousands, or even millions, of patient records being compromised.

Gap in Microsoft Blocklist Exploited, ValleyRAT Runs Undetected
A Chinese nation-state cyber group is exploiting a Microsoft-signed driver to shut down Windows security protections. The attackers deployed the driver through a custom loader. The core weakness that Silver Fox relied on remained exploitable even after patching.

Nederlandse F-35 gevechtsvliegtuigen zijn in Polen begonnen met de bewakingstaak boven Oost-Europa. Dat gebeurt samen met de Noren. Een overzicht van Defensieoperaties in de week van 27 augustus tot en met 2 september 2025.