Aggregator
CVE-2025-3248
У ИИ действительно нет пределов? Учёные нашли доказательства, что некоторые задачи он не решит никогда
Самая приятная месть в истории интернета. Программа ScamBuster забалтывает хакеров до потери пульса
SingGuard-NSFA: Open-source guardrails for agentic AI
SingGuard-NSFA is an open-source guardrail framework aimed at operational threats in agent workflows. Four models ship at 0.8B, 2B, 4B, and 9B parameters, all built on Qwen3.5 base backbones. Risk taxonomy The NSFA risk taxonomy organizes threats along the CIA triad of confidentiality, integrity, and availability. It defines 185 risk variants grouped under a smaller set of top-level domains and mid-level categories, cross-validated against three OWASP guidelines. Five top-level domains cover query-side threats: prompt injection … More →
The post SingGuard-NSFA: Open-source guardrails for agentic AI appeared first on Help Net Security.
Крошечная ошибка с гигантскими последствиями. Дыра в WinFsp делает из мошенника хозяина компьютера
The MDR renewal question: What changes when AI can handle the alerts
For most of the past decade, the managed detection and response (MDR) decision was a simple one: teams that couldn’t staff a 24/7 SOC outsourced detection and response to a provider who could. It solved a resources problem, and the alternatives (hiring a team you couldn’t afford or keeping a functional set of SOAR playbooks across an expanding alert surface) were worse. But a growing number of security leaders are looking at their next MDR … More →
The post The MDR renewal question: What changes when AI can handle the alerts appeared first on Help Net Security.
Пираты легко найдут новый адрес. Google просит Европу прекратить массово блокировать IP-адреса и DNS-сервисы
An AI overthinking attack can tie a robot up for over a minute
Robots that read the world through cameras now lean on large vision-language models to interpret what they see and decide what to do next. These models handle images and text together, so any words that fall inside the camera frame become part of the input. A stop sign, a street name, a sticker on a wall. The overthinking behavior at the center of the attack Researchers at Michigan Technological University have shown that this reading … More →
The post An AI overthinking attack can tie a robot up for over a minute appeared first on Help Net Security.
注意喚起: 2026年7月マイクロソフトセキュリティ更新プログラムに関する注意喚起 (公開)
Знакомьтесь, Cuddle-Fish: парящий робот-кит станет вашим самым ласковым и безопасным домашним призраком
AI used to help plan the break-in, now it’s doing the break-in
Over the past twelve months, researchers documented intrusions in which AI ran exploitation workflows autonomously, generating thousands of commands across dozens of sessions with minimal human direction, according to Check Point’s AI Security Report 2026. AI-powered cyber attacks The attackers posing the greatest risk are those orchestrating AI across multiple stages of the attack chain without requiring human intervention. They achieve this by obtaining capable AI models and removing their safety controls. Attackers gain AI … More →
The post AI used to help plan the break-in, now it’s doing the break-in appeared first on Help Net Security.
Учился пользоваться Nmap — случайно уронил рабочую сеть. История одного любопытного инженера
JVN: HYPER SBI 2のインストーラにおけるDLL読み込みに関する脆弱性
Xmax AI 发布 X2.0,把视频变成可以「玩」的界面
JVN: Siemens製品に対するアップデート(2026年7月)
OpenAI 首款硬件或为无屏智能音箱;梁文峰成 AI 公司新首富;内存涨价利好,iPhone 在华市场份额大幅提高 | 极客早知道
JVN: CISA ICS Advisory / ICS Medical Advisory(2026年07月14日)
Weekly Update 512: IoT Lockout Fail
"Build a smart home", they said. "It'll make life so much better", they said. Well, life wasn't very bloody good at 23:00 the other night after travelling 33 hours from Paris only to find the IoT doorlock batteries dead and the