Posts of last few hours

从春天走到秋天
心疼自己，然后翻篇
https://mp.weixin.qq.com/s?__biz=MzUyMTUwMzI3Ng==&mid=2247486017&idx=1&sn=b60b274839e45d2d2a15333714ff742e
现代 Web 框架共享原生图片处理链的攻击面拆解
以 CVE-2026-84383 为例，拆解 Next.js、Nuxt 与 Astro 共享的 Sharp、libvips、libheif 原生图片处理链，以及底层内存破坏如何获得 Web 远程可达性。
https://mp.weixin.qq.com/s?__biz=Mzg4MzYxODA4Mw==&mid=2247484194&idx=1&sn=0385d879aac31fc35ae40227258d5c1c
How to Comply with MiCA Regulations for Crypto Asset Service Providers in the European Market?
MiCA compliance requires crypto firms entering the EU to address authorization, governance, capital, client asset protection and ongoing reporting requirements.
https://hackread.com/crypto-asset-service-providers-comply-mica-regulations-europe/
折叠屏iPhone维修费传8000元，苹果称尚未定价；腾讯Chatterfly输入法内测；微软高管称AI训练是「史上最大规模劳动盗窃」｜极客早知道
比尔·盖茨警告：AI 或成为人类历史上最严重的不平等来源； 微软高管：AI 训练是「人类历史上最大规模的劳动盗窃」； 吴恩达回应 AI 末日论:别被科幻叙事带偏，应解决现实工程问题
https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653113820&idx=1&sn=f0fbec42cd39f0844f985dd4b04222e8
【开源报告】美国中央情报局的隐蔽行动与政治暗杀
本报告以美国参议院丘奇委员会公开的《涉嫌暗杀外国领导人的阴谋》及其相关解密往来函件为核心，结合互联网开源情报，对二十世纪五六十年代美国中央情报局（CIA）的隐蔽行动与政治暗杀指控进行系统性剖析。
https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651157513&idx=1&sn=ecb6f424d96ad72385af4d9d1041c4d7
Takedowns Are Not Kills: Inside the Cybercrime Infrastructure Supply Chain
https://www.youtube.com/watch?v=r91JAmf4oUg
checkov v3.3.19
Checkov is a static code analysis tool for infrastructure as code (IaC) and also a softw
https://buaq.net/go-443425.html
Daily Dose of Dark Web Informer - September 18th, 2026
This daily article is intended to make it easier for those who want to stay updated with my regular Dark Web Informer and X/Twitter posts.
https://darkwebinformer.com/daily-dose-of-dark-web-informer-september-18th-2026/
Brevo Supply-Chain Attack Infected Over 100,000 Websites
A Brevo supply-chain attack used compromised Cloudflare access to inject malware into websites, potentially affecting over 100,000 sites. Brevo, formerly known as Sendinblue, is a French cloud-based marketing and customer communication platform whose clients include eBay, Louis Vuitton and Michelin. The company was first compromised on September 10, when attackers exploited a vulnerability in its […]
https://securityaffairs.com/199355/hacking/brevo-supply-chain-attack-infected-over-100000-websites.html
proxmark3 v4.23346
New releaseSep 19, 2026Hardware tool for RFID/NFC analysis, emulation, sniffing, and cloning. Suppor
https://buaq.net/go-443423.html
Vectra AI Launches Ascent to Help Address New Era of AI-Driven Attacks
The new program expands Vectra AI's partner strategy as increasingly complex security environments and the growing use of AI create demand for broader AI expertise, services, and security outcomes.
https://www.darkreading.com/cyberattacks-data-breaches/vectra-ai-launches-ascent-new-era-ai-driven-attacks
Early Scattered Spider member pleads guilty to cybercrime spree

Ahmed Elbadawy pocketed massive proceeds from his crimes. Prosecutors are seeking the forfeiture of about $17.6 million in virtual currency, luxury vehicles, and a vast collection of jewelry and designer bags.

The post Early Scattered Spider member pleads guilty to cybercrime spree appeared first on CyberScoop.

https://cyberscoop.com/scattered-spider-member-guilty-ahmed-elbadawy/
Зашел, огляделся, навёл порядок. Гуманоид Figure адаптируется к неизвестной обстановке без подсказок
Десятки случайных спален стали полигоном для дерзкого эксперимента.
https://www.securitylab.ru/news/577608.php
frida-ssl-bypass
Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project
https://buaq.net/go-443424.html
FFTIR, SIA and Armurerie Lavaux Dataset Claim Covers 120,158 People
A forum actor posting as ChimeraZ is selling what they claim are partial datasets associated with FFTIR, SIA and Armurerie Lavaux.
https://darkwebinformer.com/fftir-sia-and-armurerie-lavaux-dataset-claim-covers-120-158-people/
Квантовый скачок звука впервые увидели в реальном времени
Сверхпроводящий кубит сотни раз проверял состояние системы и заметил переход 1 → 0.
https://www.securitylab.ru/news/577590.php
Cisco Zero-Day Highlights API Endpoint Authentication Issues
The authentication bypass flaw CVE-2026-76460 impacts Cisco's Identity Services Engine (ISE) and received a maximum 10 out of 10 CVSS score.
https://www.darkreading.com/vulnerabilities-threats/cisco-zero-day-api-endpoint-authentication-issues
EY Survey Finds Autonomous AI Implementation Outpaces Oversight
A new survey of senior AI execs shows that while organizations are rapidly deploying AI and autonomous systems, their process and controls are not keeping pace.
https://www.darkreading.com/cyberattacks-data-breaches/ey-survey-autonomous-ai-implementation-outpaces-oversight
Veridiff
Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project
https://buaq.net/go-443421.html
Обычные наушники превратили в антенну на расстоянии 30 метров
Радиосигнал заставляет аналоговую электронику самой выдавать содержимое аудиоканала.
https://www.securitylab.ru/news/577560.php

Managed ad