Posts of last few hours
Please support the site operations by clicking ads.
Dutch police have arrested a 45-year-old woman suspected of involvement in an attempt to arrange the murder of a Rotterdam businessman through a dark web murder-for-hire website.
https://darkwebinformer.com/dutch-woman-arrested-over-alleged-dark-web-murder-for-hire-plot/
环境异常 当前环境异常，完成验证后即可继续访问。 去验证
https://buaq.net/go-442446.html
A mass-scanning campaign targeting internet-exposed Vite development servers is attempting to steal cloud credentials and configurations from AWS and Azure deployments. [...]
https://www.bleepingcomputer.com/news/security/hackers-target-exposed-vite-dev-servers-to-steal-aws-azure-secrets/
The pro-Ukraine hacktivist group Hacking Cat has evolved from carrying out website defacements and data leaks to more sophisticated and destructive attacks on Russian targets, researchers said.
https://therecord.media/ukraine-malware-russia-ransomware
Вебинар Positive Technologies состоится 17 сентября в 14:00
https://www.securitylab.ru/news/577388.php
豆包发布手机助手消费者版2026 年 9 月 14 日，豆包手机助手消费者版本正式发布。相比此前的技术预览版，新版本进一步强化日常使用中的稳定性、系统级交互、本地信息检索和任务执行能力，同时以 Bet
https://buaq.net/go-442420.html
一次攻防对抗项目中对某医院 HIS 系统的渗透，目标是验证登录用户权限边界并扩大战果。整个链路走下来很有意思：看似处处有鉴权，实则令牌签名可逆向，最终用一个低权限账号拿到了全量用户数据。
https://xz.aliyun.com/news/92669
The sites are designed to collect victims’ contact details, which scammers then use to target them through phone or email to steal money, personal information or gain access to their devices.
https://therecord.media/hundreds-of-fake-gov-websites-central-asia-scam
特朗普连线黄仁勋 斥责AI危险论是中国阴谋英伟达公司CEO黄仁勋周一在参加一场小组讨论时，现场接听了美国总统特朗普打来的电话。黄仁勋是在洛杉矶举行的All-In峰会台上接听这通电话的。通话期间，特朗普
https://buaq.net/go-442417.html
WordPress has announced it's launching an automated security review for every release of a plugin before it's distributed through the WordPress.org update API so as to analyze it for potential security issues and ensure there are no risks involved.
"New plugins are reviewed before they enter the directory, but updates ship continuously after that," David Perez, WordPress Official Plugin
https://thehackernews.com/2026/09/wordpress-adds-automated-plugin-reviews.html
https://mp.weixin.qq.com/s?__biz=MzAwNDcwMDgzMA==&mid=2651049158&idx=2&sn=07bbdf3cabd97840e99dcea5066bd598
——以“取—数—鉴”为分析框架
https://mp.weixin.qq.com/s?__biz=MzAwNDcwMDgzMA==&mid=2651049158&idx=1&sn=85e65bda11bee97f7190b293fd5ceb3d
根据发表在《Ecology》期刊上的一项研究，一群非洲野犬完成了横跨大陆、创纪录的 4000 公里之旅。科学家表示这是有记录以来非洲陆生哺乳动物为寻找配偶而行进的最远距离。三只雄犬行进的直线距离大约为 418 公里，但为了绕过人类活动区域它们迂回走了 4000 公里路。非洲野犬是非洲最稀有的捕食者之一，目前野外仅存约 6000 只。它们生活在高度社会化的家族群中，集体狩猎，四处游荡、寻找新领地以及与其它群体进行繁殖机会而闻名。它们无法在自己出生的家族群内繁衍，因此要么等待可能最终继承该家族群，要么在两三岁时出发寻找配偶。在这次寻找配偶而进行的迁徙中，三只雌性犬因落入人类陷阱而有两只死亡。
https://www.solidot.org/story?sid=85376
Американские дроны готовят к производству как расходный материал.
https://www.securitylab.ru/news/577363.php
2026 年 8 月多台被入侵的 Cisco Firewall Management Center（思科防火墙
https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451188758&idx=1&sn=925fa614b706046fb8a5fb51f635ba9d
Три голоса появились там, где железо умеет только включать и выключать звук.
https://www.securitylab.ru/news/577362.php
表面上是个 debug 接口问题，顺着调用链跟下去会发现，真正失守的是 `authentik` 在 detail `GET` 上依赖的对象级授权边界。只要目标实例配置过 LDAP Source，攻击者又能访问 API 并知道或猜到某个 `slug`，就可以在未登录状态下请求
https://xz.aliyun.com/news/92667
Latest Blog Posts
- 4 weeks 1 day ago
- 3 months ago
- 3 months ago
- 3 months ago
- 3 months ago
- 7 months 3 weeks ago
- 1 year 1 month ago
- 1 year 1 month ago
- 1 year 2 months ago
- 1 year 6 months ago