Posts of last few hours

黑客针对暴露的 Vite 开发服务器窃取 AWS、Azure 机密信息
error code: 1003
https://buaq.net/go-442431.html
安装量达 3 万的 Twitch 扩展泄露用户 OAuth 令牌
error code: 1003
https://buaq.net/go-442432.html
开学季 | 学生理财的三条建议，学生党也可以一样理财
开学季少数派的读者中有不少学生朋友，而对这个暑假之后即将进入大学的读者来说，接下来摆在眼前的可能是新的城市、新的生活环境和新朋友，以及更多可以自由安排的时间用来学习、探索。因此和往年一样，少数派也将整
https://buaq.net/go-442441.html
CVE-2024-51504 漏洞分析
https://buaq.net/go-442450.html
brook v20270101
Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project
https://buaq.net/go-442430.html
Twitch extension with 30K installs exposes users’ OAuth tokens
A browser extension called Twitch Enhanced Viewer | JeetBot, available in the official Chrome and Firefox stores, sends users' Twitch OAuth session tokens to a commercial bot service. [...]
https://www.bleepingcomputer.com/news/security/twitch-extension-with-30k-installs-exposes-users-oauth-tokens/
Обычный 155-мм снаряд научили держать курс при глушении GPS
Боеприпас сам поправляет траекторию после выстрела.
https://www.securitylab.ru/news/577364.php
日本数字厅称 VPN 漏洞泄露 24.6 万条人员记录
error code: 1003
https://buaq.net/go-442433.html
Telegram Desktop 缺陷允许隐藏 JavaScript 从 HTML 导出文件中窃取消息
error code: 1003
https://buaq.net/go-442434.html
Windows Server服务器谨慎安装9月更新：安装后远程桌面服务异常 机器直接失联
https://buaq.net/go-442421.html
新型 DDRop 攻击攻破 Intel TDX 和 AMD SEV-SNP 机密计算
error code: 1003
https://buaq.net/go-442435.html
Five alleged leaders of Black Axe’s operations in South Africa extradited to US

Officials said the five individuals concocted various long-running romance scams to trick U.S.-based victims into sending them money.

The post Five alleged leaders of Black Axe’s operations in South Africa extradited to US appeared first on CyberScoop.

https://cyberscoop.com/black-axe-south-africa-leaders-extradited/
亚马逊Prime Video推新闻短片叫板TikTok
亚马逊Prime Video正在通过增加短视频新闻片段来追赶TikTok。该公司周一表示，其正在扩大其新闻报道，以纳入提供本地和全国新闻的点播新闻片段。这些将在电视和其他客厅设备上可用，但将很快推出到
https://buaq.net/go-442437.html
Hackers hijack HBO Max Reddit account to push malware in ClickFix ads
Hackers compromised HBO Max's official Reddit account and used it to push malicious ads that launched ClickFix attacks to infect Windows and macOS devices with information-stealing malware. [...]
https://www.bleepingcomputer.com/news/security/hackers-hijack-hbo-max-reddit-account-to-push-malware-in-clickfix-ads/
3BB 攻击者利用 MeshCentral 后门获取 root 权限，目标是用户凭据
error code: 1003
https://buaq.net/go-442436.html
AirTag для шпионских очков. Приложение предупреждает, когда рядом Meta-камера
Носимая электроника оставляет след, даже когда выглядит совершенно обычно.
https://www.securitylab.ru/news/577341.php
ISC Stormcast For Tuesday, September 15th, 2026 https://isc.sans.edu/podcastdetail/10094, (Tue, Sep 15th)
https://buaq.net/go-442425.html
osv-scanner v2.6.0
Use OSV-Scanner to find existing vulnerabilities affecting your project's dep
https://buaq.net/go-442424.html
China Calls Amodei’s AI Proposal a New Cold War Playbook
China rejects Amodei’s AI slowdown proposal, calling it fearmongering and a US attempt to contain China’s technology sector. The debate over whether the world should slow down the development of advanced AI has quickly turned into something bigger than a technology argument. Dario Amodei, CEO of Anthropic, has called for a slower pace of development, […]
https://securityaffairs.com/199048/uncategorized/china-calls-amodeis-ai-proposal-a-new-cold-war-playbook.html
Trancy Air – 电脑上随处翻译，还能说中文，自动输入英文
https://buaq.net/go-442428.html

Managed ad