Aggregator

Что оператор видит даже при HTTPS и как закрыть утечки.

Turla, a long-running cyber espionage operation linked by French authorities to Russia’s Federal Security Service, has again drawn attention after investigators detailed compromises affecting French organizations. The group has been active for more than two decades and is known for quietly stealing sensitive information from government, diplomatic, defense, justice, and technology targets. Rather than relying […]

The post Turla Hackers Exploit SharePoint Flaw to Access Thousands of French User Accounts appeared first on Cyber Security News.

人民大学宣布决定撤销蒋方舟的硕士学位。中国人民大学星期一（7月13日）晚在微博通报称，近日，网上出现关于中国人民大学文学院2019届硕士毕业生蒋方舟学位论文涉嫌学术不端的新线索。学校高度重视，立即组建由多位校内外知名专家参与的调查组，通过文献溯源比对、依规问询、听取当事人申辩等，深入开展核查工作。“经核查，蒋方舟硕士学位论文有九处与境外某篇期刊论文存在文字重合，且相关内容未标注引用、未列明参考文献。人民大学依据中国《高等学校预防与处理学术不端行为办法》《中华人民共和国学位法》的相关规定，认定蒋方舟构成学术不端行为，并研究决定，撤销其硕士学位。”蒋方舟本人星期一晚在微博回应，接受人大校方的处理并致歉。她说：“因此事被惊扰并失望的读者，我致以歉意。对我的老师为此事蒙受的处分，深致歉意。”

A threat actor using the alias NightBroker claims to have breached Suitable AI (suitable.ai), an AI-powered recruitment platform based in India and the United States that helps STEM professionals find jobs.

今日暂未更新资讯~
更多最新文章，请访问SecWiki

Vinton Cerf 上周卸任 Google 首席互联网布道官一职，标志着其职业生涯的落幕。现年 83 岁的 Cerf 与 Robert Kahn 合作设计了 TCP/IP 协议，因此被誉为互联网之父。TCP 管理通过互联网发送的数据包，确保不会丢包，能以正确的次序接收，在正确的目的地重新组装。IP 管理地址，在正确的目的地转发和发送数据。两者共同构成了互联网的核心架构，让计算机能连接和交换流量。自 2005 年以来，Cerf 一直担任 Google 的副总裁和首席互联网布道官。

Two threat actors using the aliases misere and ChimeraZ claim to have breached Litige.fr, a French online legal-services and debt-recovery platform, and are leaking data they say covers 595,024 users.

Submit #855677 / VDB-378115

Submit #855675 / VDB-378114

Автор «Оппенгеймера» объяснил, почему у ИИ никогда не выйдет заменить реальных актёров.

天文学家利用韦伯望远镜观测了一颗逃脱死亡命运的类木星行星 WD 1856 b。天文学家是在利用 TESS 望远镜观测白矮星时发现 WD 1856 b 的。白矮星是类太阳恒星的残骸，已经历了红巨星阶段，留下了地球大小的核心。天文学家在 WD 1856 系统发现了一颗气态巨行星，它距离恒星仅仅只有 0.02 个天文单位。这颗白矮星已经死亡了 60 亿年，它在红巨星阶段本应该会吞噬内行星，而气态巨行星本应该在此过程中向外迁移，结果它却更接近恒星了。韦伯的观测发现，WD 1856 b 被气溶胶笼罩，大气层含有甲烷，向太空辐射的能量大约是其从正在冷却的恒星接收能量的 25 倍。行星的温度高达 400 开尔文。

Misconfigured server exposed three phishing operators running Evilginx forks to bypass MFA

Internet-facing AI systems are becoming a new target for opportunistic attackers. Recent scanning activity shows that threat actors are actively searching for Model Context Protocol, or MCP, servers, AI assistant configuration files, and exposed local language-model services. The activity was observed across low-traffic websites that did not appear to host AI infrastructure. That detail matters […]

The post Internet-Wide Scans Target MCP Servers, Claude Credentials, and Exposed AI Models appeared first on Cyber Security News.

State-sponsored attackers are targeting critical infrastructure networks in defense, communications, energy, finance, government and health care.

The post Officials once again warn defenders that Russian hackers are targeting network devices appeared first on CyberScoop.

不知道你有没有用过这类 AI 个人助手。它能记住你的饮食偏好工作习惯，能自动帮你查收邮件整理日程，甚至不用你发话，后台定时就能把待办梳理好推给你。

Чужие требования заставили авторов проекта пойти на весьма радикальный шаг.

Somewhere right now, a security tool is quietly finding bugs faster than any human can fix them. That's supposed to be the good news. The catch is that the attackers have the same tools, pointed the other way, and they don't file tickets. That's the shape of this week. Trusted code turns on the people who installed it. Old bugs from last year are still landing because the fix sat in a queue too

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a postmortem on a data leak in which a contractor published dozens of internal CISA credentials -- including AWS Govcloud keys -- in a public GitHub repository for almost six months before being notified by KrebsOnSecurity. Experts say the gaps identified in the agency's initial response provide important lessons that all security teams should absorb.