Posts of last few hours

甲骨文据称已启动新一轮裁员 部分团队被裁比例达到两位数
美国甲骨文公司已经启动新一轮裁员。根据泄露的内部文件显示，部分团队的裁员比例将达到两位数。当地时间周一（14日），领英、Reddit、Blind等社媒平台开始出现一些帖子，发帖者自称受到了最新一轮裁员
https://buaq.net/go-442438.html
New DDRop Attack Breaks Intel TDX and AMD SEV-SNP Confidential Computing
Researchers have disclosed a new hardware attack, called DDRop, that breaks the memory protection in Intel and AMD confidential computing by silently dropping writes to a server's memory, so the processor keeps reading old encrypted data as if it were current. The attack requires an attacker who already controls the server's software and can briefly access the machine to insert a small circuit
https://thehackernews.com/2026/09/new-ddrop-attack-breaks-intel-tdx-and.html
3BB Attacker Used MeshCentral Backdoor for Root Access, Targeted Subscriber Credentials
An attacker was operating inside the network of 3BB, one of Thailand's largest broadband providers, and maintained remote control of internal machines using a legitimate management tool called MeshCentral, threat intelligence firm Hunt.io said. The company uncovered the intrusion by examining a server the attacker had left open on the internet, which held the attacker's own tools and a list of
https://thehackernews.com/2026/09/3bb-attacker-used-meshcentral-backdoor.html
惠普用户可能遇到Windows 11更新后卡在登录界面的问题 需先安装BIOS更新
https://buaq.net/go-442422.html
ИИ нашёл молекулу, которая смогла отсрочить преждевременные роды
Нанотело Nb2G5 заблокировало рецептор окситоцина и задержало начало родов у мышей примерно на три часа.
https://www.securitylab.ru/news/577320.php
Telegram Desktop Flaw Lets Hidden JavaScript Exfiltrate Messages From HTML Exports
A flaw in Telegram Desktop let a bot's message plant hidden JavaScript inside chats that users exported to HTML files, security researchers at ExPatch said in a writeup published on September 12. In Telegram, the message looked ordinary, with a link button, and the script ran only when someone opened the export file in a web browser. It could then copy every message in that file to
https://thehackernews.com/2026/09/telegram-desktop-flaw-lets-hidden.html
warpgate v0.29.0-beta.1
Warpgate is a smart & fully transparent SSH, HTTPS, Kube
https://buaq.net/go-442415.html
Cyber threat actors use artificial intelligence in an active global campaign to disrupt internet-exposed programmable logic controllers
https://cyber.gc.ca/en/news-events/cyber-threat-actors-use-artificial-intelligence-active-global-campaign-disrupt-internet-exposed-programmable-logic-controllers
美参议院酝酿AI监管立法：要求AI公司证明已采取安全措施防止伤害
据一名参议院助手和一位熟悉谈判情况的说客透露，美国参议院谈判代表正在讨论一项立法，该法案将要求AI公司证明其已采取合理预防措施，以防止其工具造成伤害。据这名参议院助手和说客透露，参议员们正在讨论赋予美
https://buaq.net/go-442439.html
Нажал ссылку — получил бэкдор. Популярная клавиатура стала входом для APT
Обычная функция превратилась в тихий канал доставки вредоносного кода.
https://www.securitylab.ru/news/577339.php
Organizational cyber security and privacy risk management activities - ITSP.10.036
https://cyber.gc.ca/en/guidance/cyber-security-privacy-risk-management/organizational-cyber-security-privacy-risk-management-activities-itsp10036
Codex频繁出现所选模型已达容量上限？ OpenAI回应：不用怀疑你就是黑号了
https://buaq.net/go-442423.html
Anthropic进军金融顾问市场 推出新工具
Anthropic进军金融顾问市场 推出新工具 美国人工智能公司 Anthropic 周一推出一套面向金融顾问的新工具，将其Claude聊天机器人与贝莱德、嘉信理财和先锋集团等金融机构提供的投资分析及
https://buaq.net/go-442440.html
Red Heron Exploits Gitea RCE to Compromise 13 Organizations Across Six Countries
A suspected Chinese threat actor tracked as Red Heron has been attributed to the rapid exploitation of a recently disclosed security vulnerability in Gitea to compromise internet-facing instances as part of a multi-national campaign. "Red Heron scanned 1,386 Gitea instances across seven countries and maintained a separate dataset of 477 Taiwan-based systems," Acronis Threat Research Unit (TRU)
https://thehackernews.com/2026/09/red-heron-exploits-gitea-rce-to.html
cowrie v3.0.14
Back to updatesNew releaseSep 15, 2026Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/.. SPDX-Fil
https://buaq.net/go-442414.html
Вшивайте мораль в код или готовьтесь к бойне. ИИ давит животных ради выгоды
Пара единиц топлива оказалась способна перевесить ценность жизни в решениях автономных моделей.
https://www.securitylab.ru/news/577370.php
Anthropic CEO: Time to Shift From Improving to Controlling AI
Dario Amodei says it's time to slow the pace of frontier AI improvements so that security and risk prevention efforts can catch up. What does this mean for enterprises?
https://www.darkreading.com/cyber-risk/anthropic-ceo-shift-from-improving-to-controlling-ai
Hidden Crypto Mining Farm Seized in Mexico as Authorities Probe Possible Cartel Money Laundering
Mexican authorities have seized a clandestine cryptocurrency mining operation hidden in the mountains of Puebla as investigators examine whether the facility was being used to launder money connected to criminal activity.
https://darkwebinformer.com/hidden-crypto-mining-farm-seized-in-mexico-as-authorities-probe-possible-cartel-money-laundering/
苹果Siri AI终于来了 历经延期后正式开放测试
苹果Siri AI终于来了 历经延期后正式开放测试苹果公司周一发布了新版iPhone操作系统iOS 27，其中包括重新设计的Siri AI个人助理。据苹果介绍，Siri AI是一款能力大幅提升、交互更
https://buaq.net/go-442416.html
微软似乎在为Windows 11设计新的默认鼠标指针 替换沿用多年的默认样式
https://buaq.net/go-442408.html

Managed ad