Posts of last few hours

OmniCTF 2026 Finals
Name: OmniCTF 2026 Finals (an OmniCTF event.)
Date: Sept. 19, 2026, 6 a.m. — 19 Sept. 2026, 16:00 UTC  [add to calendar]
Format: Jeopardy
On-site
Location: Romania, Constanța
Offical URL: https://omnictf.com/
Rating weight: 0.00
Event organizers: OmniCTF
https://ctftime.org/event/3401
Android 17 QPR1 引入了 Pixel 暂时独占的新 API
Android 安全加固项目 GrapheneOS 披露，Google 向其旗舰手机 Pixel 推送了 Android 17 QPR1 更新，引入了新 API。而这些 API 没有提供给 Android 开源项目(AOSP)，这是自 Android Honeycomb (3.x) 以来从未有过的情况。新 API 为 Pixel 限时独占，其它 Android OEM 厂商无法获得。Google 现在只向 AOSP 项目提供年度版本和第二个季度更新版本 QPR2，第一个和第三个季度更新版本 QPR1 和 QPR3 都是 Pixel 独占。新 API 将通过 2026 年 12 月释出的 QPR2 提供给 AOSP 和 OEM 厂商。GrapheneOS 称，Pixel 通过固件移除了对安全特性 MTE 的支持，但硬件上仍然保留了 MTE。GrapheneOS 再次抱怨它对 Pixel 的支持变得日益困难，称与摩托罗拉的合作会更顺利。

https://www.solidot.org/story?sid=85425
当全网以为现在是2006年
时间这个东西，平时谁也不会多想。手机上的时钟、电脑右下角的数字，好像天生就该是对的。
https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451188860&idx=1&sn=0be1615627475a59dca7d45ba5a12b1b
CISA Warns of Linux Kernel Vulnerabilities Actively Exploited in Attacks

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has warned that attackers are actively exploiting three Linux kernel vulnerabilities, creating an urgent patching and investigation deadline. CISA added CVE-2025-39682, CVE-2026-53266, and CVE-2025-39964 to its Known Exploited Vulnerabilities catalog on September 18, 2026, with remediation required by September 21 under Binding Operational Directive 26-04. The KEV […]

The post CISA Warns of Linux Kernel Vulnerabilities Actively Exploited in Attacks appeared first on Cyber Security News.

https://cybersecuritynews.com/linux-kernel-vulnerabilities-actively-exploited/
Самая молодая планета во Вселенной ещё ест свой диск
Астрономы нашли газовый гигант возрастом менее миллиона лет.
https://www.securitylab.ru/news/577591.php
BragJack attacks hijack AI browser agents through malicious extensions
BragJack, a proof-of-concept attack from Forever Security's Gal Weizman, hijacks the AI assistants in Chrome, Edge, Opera Neon, Perplexity Comet, and Claude in Chrome using one malicious extension. The Prompt Forcing technique earned over $20,000 in bounties and two CVEs. [...]
https://www.bleepingcomputer.com/news/security/bragjack-attacks-hijack-ai-browser-agents-through-malicious-extensions/
Google Gemini also Broke Out of Its Test Environment
Google Gemini escaped a cyber test environment, reached three real companies, and exposed why AI security tests need strict isolation. Google has confirmed that one of its Gemini models broke into the systems of three real companies during a cybersecurity test in May. The incident is the first publicly known case in which a Google […]
https://securityaffairs.com/199392/ai/google-gemini-also-broke-out-of-its-test-environment.html
Используете MAX? Исследователи заглянули внутрь и нашли доступ к экрану, JavaScript, сети и авторизации
Архитектура приложения позволяет контролировать трафик, данные авторизации и содержимое встроенных сервисов.
https://www.securitylab.ru/news/577646.php
North Korean WaterPlum hackers infected 30,000 devices worldwide
A joint law enforcement advisory warns that the North Korean hacking group WaterPlum compromised at least 30,000 devices worldwide from December 2025 through July 2026 and transferred more than $10.7 million in stolen cryptocurrency to North Korea. [...]
https://www.bleepingcomputer.com/news/security/north-korean-waterplum-hackers-infected-30-000-devices-worldwide/
EDR攻击技术-进程与遥测欺骗
https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247497178&idx=1&sn=bc85ee18b9552d272157a8c07ffcda05
海豚 Bubbles 被发现会强迫饱腹鱼吐出食物然后自己将其吞下
由于海豚的脸部看起来总是在微笑，出于拟人化心理，人类会假设海豚是大海里的好孩子。但行为类似恶棍的海豚并非不存在。根据发表在《Ecology and Evolution》期刊上的一篇论文，研究人员报告了一只生活在澳大利亚 大堡礁南部 Lady Elliott 岛附近的雄性宽吻海豚 Bubbles。Bubbles 有着被称为盗食寄生（kleptoparasitism）的行为，它会专门追逐刚刚饱餐一顿的大眼鲹（bigeye trevally），强迫它们吐出刚吞下的食物，然后自己去吞下这些食物。盗食寄生最著名的动物可能是海鸥。研究人员在 2021 年 6 月-2025 年 10 月间记录了 20 次 Bubbles 的觅食行为，其中 11 次涉及盗食。Bubbles 首先会通过回声定位锁定一只目标鱼，然后紧跟这条鱼，对鱼群中的其它鱼视而不见，当目标鱼受惊而吐出食物时，它会停止追逐，吞食其吐出的食物。Bubbles 在半小时内可重复此过程多达 10 次，它主要针对大眼鲹，但不会去吃掉鱼。研究人员猜测这种觅食行为比海豚传统的猎物追逐，消耗的能量更少。Bubbles 可能是通过定位的回声差异区分哪些鱼刚刚饱餐一顿。

https://www.solidot.org/story?sid=85424
ShinyHunters hacks Clop leak site, threatens to extort ransomware gang
The ShinyHunters extortion gang breached the Clop (aka Cl0p) ransomware operation's data leak site, defacing the Tor site and allegedly stealing server data and the private keys for its onion service. [...]
https://www.bleepingcomputer.com/news/security/shinyhunters-hacks-clop-leak-site-threatens-to-extort-ransomware-gang/
Can You Prove a New CVE Is Exploitable Before Attackers Do? Learn How in This Webinar
A new CVE drops. Your scanner finds it. The severity score looks ugly. But that still does not answer the question that matters: Can it actually be exploited in your environment? Mythos-class AI is compressing the time between disclosure and working exploitation, while many security programs still validate risk on weekly or quarterly cycles. The dangerous gap is no longer just technical. It is
https://thehackernews.com/2026/09/can-you-prove-new-cve-is-exploitable.html
Identity Visibility in 2026: The Foundation of Identity Security
Identity visibility is a starting point for modern identity security, because stolen and misused credentials are among the most frequently reported initial access vectors in breach research, including Verizon's annual Data Breach Investigations Report. This article explains what identity visibility means in IAM, why cloud and multicloud environments complicate it, which capabilities matter in
https://thehackernews.com/2026/09/identity-visibility-in-2026-foundation.html
20 часов работы от 9-минутной зарядки: представлен американский человекоподобный робот Digit 5
Новый американский гуманоид переносит 23 кг и почти не простаивает у розетки.
https://www.securitylab.ru/news/577584.php
Google Gemini AI Hacked 3 Real Companies After Cybersecurity Test Exposed It to Internet

Google has confirmed that its Gemini artificial intelligence model accidentally accessed protected systems belonging to three real companies during a cybersecurity evaluation. The incident stemmed from a configuration error that exposed the AI agent to the public internet. Google Gemini AI Hacked This situation highlights how autonomous AI systems can breach intended testing boundaries when […]

The post Google Gemini AI Hacked 3 Real Companies After Cybersecurity Test Exposed It to Internet appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

https://gbhackers.com/google-gemini-ai-hacked-3-real-companies/
AI Helps Hackers Hijack OpenAI Staff Accounts Through a Forum
AI helped researchers exploit a Discourse flaw in under 72 hours, hijacking OpenAI staff accounts and exposing the risks of shared SSO. Three researchers at Hacktron just took over ChatGPT and Codex accounts belonging to OpenAI staff. The attack did not rely on phishing techniques or a leaked password. Through an image upload on OpenAI’s […]
https://securityaffairs.com/199378/ai/ai-helps-hackers-hijack-openai-staff-accounts-through-a-forum.html
Спецслужбы рушат индустрию заказных атак по всему миру. Ликвидирован старейший DDoS-сервис NightmareStresser
Площадка предлагала десятки методов атак и заявляла мощность до 200 Гбит/с.
https://www.securitylab.ru/news/577579.php
Viral AI actress' hotline face-scans every caller, watches their mood
AI actress Tilly Norwood went viral after glitching into Chinese on Piers Morgan Uncensored last night. Her "Talking Tilly" video call service face-scans every caller for an 18+ age check, senses callers' moods during calls, and shuts down permanently on September 27. We tried it and read the fine print. [...]
https://www.bleepingcomputer.com/news/security/viral-ai-actress-hotline-face-scans-every-caller-watches-their-mood/
TanStack Supply Chain Attack Lets Hackers Steal 170 Private CrowdSec GitHub Repositories

CrowdSec has disclosed that attackers copied about 170 private GitHub repositories after a former employee’s account was compromised through May’s TanStack npm supply chain attack. The May 22 theft remained undetected until stolen source code appeared on a cybercrime forum on September 16, showing how a poisoned dependency can outlive its infection window and undermine […]

The post TanStack Supply Chain Attack Lets Hackers Steal 170 Private CrowdSec GitHub Repositories appeared first on Cyber Security News.

https://cybersecuritynews.com/tanstack-supply-chain-attack/

Managed ad