Aggregator

Microsoft is now testing a cleaner and faster version of Windows Search that should prioritize relevant results over ads and promotional content. [...]

Submit #856290 / VDB-165082

Submit #856171 / VDB-378291

Submit #856170 / VDB-378291

Google has started rolling out FIDO2-compliant physical security key support as a second factor for authentication in Google Credential Provider for Windows (GCPW) to all Google Workspace customers. GCPW is a free tool that lets users sign in to Windows computers with their Google Workspace account instead of, or alongside, a Windows username and password. The update allows organizations to strengthen account security by enabling administrators to enforce 2-step verification (2SV) with hardware security keys … More →

The post Google adds FIDO2 keys and phone passkeys to Windows login via GCPW appeared first on Help Net Security.

IDC 的数据显示，2026 年第二季度，中国智能手机出货量约为 6600 万部，同比下降 4.3%，连续第五个季度下滑。内存等组件成本上涨迫使大多数 Android 厂商提价，从而导致需求降温。华为和苹果是例外，分别实现了近 20% 和 25% 的增长。华为市场份额最高占 22.6%，其次是苹果的 18.1%，OPPO 16.0%，vivo 16.0%，小米 12.4% ，荣耀 11.3%，Wiko 1.1%，联想 0.3%，中兴 0.3% 以及三星 0.1%。由于涨价 618 期间智能手机销量同比下降近 15%。相比其它涨价的 Android 厂商，华为和苹果则能维持价格的稳定。

登录 注册

Подрядчику, опубликовавшему секретные данные, закрыли доступ.

The vast majority of UEFI computers carry a Microsoft certificate that will trust a small first-stage loader called a shim, a program Microsoft signs so that Linux and assorted boot tools can run with Secure Boot on. Eleven of those signed shims turned out to be old enough to undo the protection they were meant to support. ESET researchers found the vulnerable versions, all at 0.9 or below, and Microsoft revoked them in its June … More →

The post No one knows how many old shims can still bypass UEFI Secure Boot appeared first on Help Net Security.

Huntress found an AI-generated PowerShell script used for AD reconnaissance, showing attackers are using AI to create custom, evasive tools. During an incident response investigation on June 3, 2026, Huntress analyst Jevon Ang recovered a PowerShell script from a compromised Windows Server that the attacker had used to map out the victim’s Active Directory environment. […]

Attacker Used AI to Build Custom PowerShell Recon MalwareHuntre

就在前两天，xAI 正式发布了 Grok 4.5，这是目前 xAI 推出的最强 AI 模型，也是 Grok 系列一次重要升级。更重要的是，目前已经限时免费开放体验，只

瑞士军方的网络战部门将从 10 月起开始使用开源办公替代 OpenDesk。此举的背景是微软的战略转变。瑞士长期以来一直与这家美国公司合作，此前敏感的政府数据一直保存在瑞士自己的国家数据中心。但微软正要求客户将电子邮件、文档、日历数据或视频会议等服务只能通过其服务器访问。对于瑞士军队而言，这是巨大的国家安全风险。瑞士军方担心敏感军事信息落入美国政府手中。瑞士军方目前正在使用德国数字主权中心 (Zendis) 开发的 MS 365 开源替代 OpenDesk。

瑞士军方的网络战部门将从 10 月起开始使用开源办公替代 OpenDesk。此举的背景是微软的战略转变。瑞士长期以来一直与这家美国公司合作，此前敏感的政府数据一直保存在瑞士自己的国家数据中

Kratos is a mature Phishing-as-a-Service operation targeting Microsoft 365 users across the US, Europe, and other regions. By combining trusted platforms, anti-bot checks, and convincing login pages, ithelps attackers steal credentials while delaying detection and response. For security leaders, that increases the risk of account takeover, fraud, data exposure, and higher incident response costs. ANY.RUN […]

The post ​​Kratos PhaaS Targets US and EU: How to Reduce Microsoft 365 Account Takeover Risk​ appeared first on ANY.RUN's Cybersecurity Blog.

近期，网购“恶意仅退款”话题接连引发热议。本是保护消费者权益的善意规则，如今却乱象不止：有人专门靠恶意薅退款牟利，把“仅退款”做成稳赚不赔的黑灰产业，轻松月入过万元；不少小店商家无辜受损、申诉无门，甚至上演“千里追榴莲”的无奈闹剧。

今年以来，相关部门在规范应用程序个人信息收集使用方面持续发力，《互联网应用程序个人信息收集使用规定（征求意见稿）》已向社会公开征求意见，中央网信办近日对30款应用程序个人信息收集使用问题进行了通报。

当前，生成式人工智能正由生成内容的对话式模型向执行任务的智能体转变。过去，人工智能治理主要围绕虚假信息、算法备案和生成合成标识等领域展开，规制对象多为文本、图片、音视频等输出结果。

当前，数字经济快速发展，数据处理活动呈现规模化、链条化、复杂化特征，数据安全风险也更具隐蔽性、传导性和外溢性，传统的事后补救处置模式往往难以及时有效应对。

随着人工智能（AI）技术的应用，软件供应链呈现出三大新特征：一是……这些新特征重构了软件供应链的形态与边界，数据投毒、模型后门、提示注入等新型攻击频发，叠加传统供应链固有风险，使软件供应链安全治理面临前所未有的挑战。