Aggregator

Оказалось, квантовая угроза ближе, чем мы думали.

The Harsh Truths of AI Adoption MITs State of AI in Business report revealed that while 40% of organizations have purchased enterprise LLM subscriptions, over 90% of employees are actively using AI tools in their daily work. Similarly, research from Harmonic Security found that 45.4% of sensitive AI interactions are coming from personal email accounts, where employees are bypassing corporate

A sophisticated spear-phishing campaign that exploited a compromised mailbox belonging to the Ministry of Foreign Affairs of Oman. The operation, attributed to an Iranian-aligned group known as Homeland Justice and linked to Iran’s Ministry of Intelligence and Security (MOIS), masqueraded as legitimate multi-factor authentication (MFA) communications to infiltrate governments and diplomatic missions around the world. […]

The post Iran-Nexus Hackers Exploit Omani Mailbox to Target Governments appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

导入时，nodejspsmtp 立即调用了旨在提取钱包如 Atomic Wallet 和 Exodus 的基于 Electron 的 payload。

Эпитафия открытому вебу: убит нейросетями в возрасте 32 лет.

关键词安全漏洞HashiCorp Vault 被曝存在一个 高危拒绝服务（DoS）漏洞，漏洞编号 CVE-20

关键词GPS据《金融时报》报道，欧盟委员会主席冯德莱恩在前往保加利亚途中，其专机遭遇疑似俄罗斯发动的 GPS干

关键词恶意软件网络安全研究人员近期指出，Android 恶意软件生态正在出现明显变化。

关键词开源模型近日，美团正式发布并开源了其首个大语言模型 LongCat-Flash-Chat，这一消息迅速在

Vijaye Raji will step into a new role as CTO of Applications, reporting to CEO of Applications, Fidji Simo, following the acquisition of Statsig.

Researchers have demonstrated that advanced prompt injection techniques can turn defensive AI agents into potent vectors for system compromise. The findings, detailed in a new preprint titled “Cybersecurity AI: Hacking the AI Hackers via Prompt Injection,” expose a fundamental architectural weakness in large language model (LLM)–based security tools that could upend trust in automated pen-testing […]

The post Prompt Injection Attacks Can Exploit AI-Powered Cybersecurity Tools appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

面对这场影响国家发展与未来的技术革命，着力筑牢生成式人工智能发展的安全防线，构建科学完备、运行高效、多维协同的风险防范体系，不仅关乎技术本身的应用效能，更直接关系到国家安全、社会稳定、文化繁荣和国际竞争力提升，是摆在我们面前的重大时代课题。

针对无人机“黑飞”行为，特别是非法破解无人机飞行控制系统的黑客行为，全国公安网安部门始终保持高压严打态势，全面遏制非法活动扩散蔓延。9月1日，公安部公布3起非法破解无人机飞行控制系统黑客违法犯罪典型案例。

在数字化背景下，数据流转不仅是价值交换的媒介，更是维系整个金融行业的基石，而数字供应链在数据流转过程中承担着至关重要的角色。然而，当前金融行业在数字供应链领域管理的实践尚显不足，缺乏全面覆盖且聚焦数据流动的系统性解决方案。

随着人工智能技术的迅猛发展，其背后的政治因素日益凸显，即技术政治化势头逐渐显现。技术政治化是指技术不再仅仅是一种纯粹的科学和工程领域的创新与应用，而且是被赋予浓厚的政治色彩，成为国家间政治博弈、地缘政治竞争和意识形态较量的重要手段。

Proactive threat hunting has become an essential discipline for Security Operations Center (SOC) analysts and Managed Security Service Providers (MSSPs).  Traditional detection methods often miss novel or sophisticated adversarial techniques, making it critical for security teams to leverage advanced tools and methodologies. ANY.RUN’s Threat Intelligence Lookup (TI Lookup) empowers analysts with granular insights into Indicators […]

The post Threat Hunting Guide Designed for SOC Analysts and MSSPs appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Cybersecurity researchers have flagged a Ukrainian IP network for engaging in massive brute-force and password spraying campaigns targeting SSL VPN and RDP devices between June and July 2025. The activity originated from a Ukraine-based autonomous system FDN3 (AS211736), per French cybersecurity company Intrinsec. "We believe with a high level of confidence that FDN3 is part of a wider abusive

Ваши LLM открыты для любого, кто знает IP-адрес.