Posts of last few hours

TRC20 Drainer + AML Project + QR Method Offered as a 3-in-1 Crypto Theft Kit
A forum actor using the handle "honeymanOne" is advertising a private cryptocurrency theft kit combining a TRC20 drainer, a fake AML-check workflow and a QR-based wallet-draining component.
https://darkwebinformer.com/trc20-drainer-aml-project-qr-method-offered-as-a-3-in-1-crypto-theft-kit/
Researcher Drops BigDiskBuster Zero-Day PoC That Blocks Microsoft Defender Updates
A zero-day proof-of-concept tool that stops Microsoft Defender from installing platform and signature updates by filling all available disk space was published on GitHub on September 19. The tool, called BigDiskBuster, has no patch, no CVE, and no Microsoft advisory. Its author, Abdelhamid Naceri, is a former Microsoft security researcher whose earlier Defender exploits were used in
https://thehackernews.com/2026/09/researcher-drops-bigdiskbuster-zero-day.html
杂谈：聊聊 Jev 与 Laya 的非生成式决策机制
从 Transformer 架构、自回归解码与概率校准出发，分析 Jev 和 Laya 如何以单次前向传播完成非生成式决策，以及它们在生产系统中的适用边界。
https://www.cnpanda.net/talksafe/jev-laya-non-generative-decision-models.html
Небо над США закрыли из-за радиосбоя. Авиацию США уличили в использовании технологий прошлого века
После хаоса на северо-востоке США аудиторы разобрали защиту связи между пилотами и диспетчерами.
https://www.securitylab.ru/news/577744.php
Чёрная дыра целится в Землю: нейросеть показала 27 лет её плазменного выстрела одним видео
Яркие сгустки в джете оказались не тем, чем их считали.
https://www.securitylab.ru/news/577743.php
Two arrested in UK after Microsoft takedown of ‘Eviltokens’ AI-chatbot for cybercriminals
Available on Telegram for a $1,500 initiation fee and a recurring monthly $500 subscription, EvilTokens provided cybercriminals with artificial intelligence tools enabling them to compromise accounts, analyze breached inboxes and find the best methods for monetizing their access through fraud.
https://therecord.media/two-arrested-in-uk-after-microsoft-takedown-eviltokens
MovieReaper Malware Uses The Odyssey Torrents to Infect Users Worldwide
MovieReaper malware spreads through compromised Odyssey torrents, infecting hundreds of victims while using Solana to locate command-and-control infrastructure.
https://hackread.com/moviereaper-malware-odyssey-torrents-infect-users/
当黑客交给AI Agent干活：拿下每个目标仅需 25 美元
AI 不再只是提升效率的工具，它已经实实在在变成黑客手中的攻击武器。
https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451188907&idx=1&sn=d90e75941cc99220cfa6be0771332a42
Москвич слил сериал в сеть и заработал обвинение на 15 миллионов рублей
Копии многосерийного фильма посмотрели свыше 150 тыс. человек.
https://www.securitylab.ru/news/577769.php
Erlang security advisory (AV26-948)
https://cyber.gc.ca/en/alerts-advisories/erlang-security-advisory-av26-948
共鉴网安学术力量｜2026年度《网络空间安全科学学报》优秀论文投票正式开启
https://mp.weixin.qq.com/s?__biz=MzI0NjU2NDMwNQ==&mid=2247509420&idx=2&sn=0e8030ff8ff6cd2a5927f0319242be09
10月17日专题会议：系统安全与基础设施防御学术会议
https://mp.weixin.qq.com/s?__biz=MzI0NjU2NDMwNQ==&mid=2247509420&idx=1&sn=c97ecfd1e340e05a57af34c8216f7680
Citing China, President Trump doubles down on hands-off approach to AI regulation

Following a series of chaotic agentic hacks, Trump and administration officials have consistently expressed fears of Chinese AI dominance in pushing for fewer regulations.

The post Citing China, President Trump doubles down on hands-off approach to AI regulation appeared first on CyberScoop.

https://cyberscoop.com/trump-hands-off-ai-regulation-china-race/
Марсоход нашёл три эпохи древней воды в одном камне
Perseverance нашёл в породах кратера Езеро следы грунтовых вод, древнего озера и более поздних горячих потоков.
https://www.securitylab.ru/news/577739.php
EvilTokens PhaaS disrupted after compromising 12,000 Microsoft accounts
The EvilTokens platform that compromised more than 12,000 Microsoft accounts at over 10,000 organizations has been disrupted in an effort led by Microsoft's Digital Crimes Unit (DCU). [...]
https://www.bleepingcomputer.com/news/security/eviltokens-phaas-disrupted-after-compromising-12-000-microsoft-accounts/
Unmasking EvilTokens: Getting to the root of device code phishing

EvilTokens has quickly become one of the top PhaaS platforms, enabling device code phishing attacks through AI-assisted lures, automated infrastructure, and token theft. In collaboration with partners, Microsoft Digital Crimes Unit (DCU) facilitated a disruption of EvilTokens infrastructure and operations.

The post Unmasking EvilTokens: Getting to the root of device code phishing appeared first on Microsoft Security Blog.

https://www.microsoft.com/en-us/security/blog/2026/09/22/unmasking-eviltokens-getting-to-the-root-of-device-code-phishing/
Microsoft and partners disrupt EvilTokens, a comprehensive cybercrime service for financial fraud

The popular phishing-as-a-service platform used AI throughout the attack chain, allowing cybercriminals to steal tokens for account takeover and business email compromise.

The post Microsoft and partners disrupt EvilTokens, a comprehensive cybercrime service for financial fraud appeared first on CyberScoop.

https://cyberscoop.com/microsoft-eviltokens-cybercrime-service-takedown/
活动预告｜智能化软件开发微访谈·第四十四期：智能体工程发展趋势
2026年9月24日（周四）晚上9:30，智能化软件工程沙龙群
https://mp.weixin.qq.com/s?__biz=MzU4NDU4OTM4OQ==&mid=2247517424&idx=1&sn=4fbc6945c201243cd51d8ebf516aa5b9
Zero-day превращает локальный ИИ-агент в канал для прослушивания
Атакующий получает голосовые запросы и может использовать полномочия, которые пользователь уже доверил ИИ.
https://www.securitylab.ru/news/577730.php
Биологи нашли новую химическую «букву», которой бактерии управляют чтением генов
AvaS меняет структуру транспортной РНК и способен замедлять производство части белков.
https://www.securitylab.ru/news/577737.php

Managed ad