Aggregator
Интернет приравняли к реальному фронту. Пентагон собирает кибервойска, чтобы обойти Китай и Россию
Thieves can pull off keyless car theft in under a minute and here’s how to stop them
A keyless car can be stolen in under a minute. Two people, a pair of cheap radio amplifiers, and a fob sitting on a hallway table inside the house. That is enough. No broken glass. No alarm. No sound. Most keyless cars remain vulnerable The vulnerability runs across the global market. Germany’s largest auto club, ADAC, runs ongoing tests of keyless models against relay attacks. The rolling series has now covered more than 800 vehicles, … More →
The post Thieves can pull off keyless car theft in under a minute and here’s how to stop them appeared first on Help Net Security.
Study of AI-Assisted Cyberattacks May Reshape How Security Industry Measures Risk
Outlook годами передавал пароли открытым текстом. Виновница проблемы — одна лживая галочка
追觅首席执行官俞浩微博账号被禁言
AI agent governance gets harder when agents outnumber your people
In this Help Net Security video, Amit Gautam, CTO at Abluva, explains the security risks that autonomous AI agents bring into enterprise environments. He opens with a real case: a reconciliation agent at a financial services firm had legitimate access to a customer database. A poison instruction from upstream changed its behavior, and it scanned the entire table, extracting six million records and posting them to a Slack webhook that sent them outside the company. … More →
The post AI agent governance gets harder when agents outnumber your people appeared first on Help Net Security.
ZDI-CAN-31716: Canonical
ZDI-CAN-30169: 7-Zip
三天后复活,二十年后还在:海盗湾往事
Microsoft Edge Vulnerability Allows Remote Attackers to Execute Arbitrary Code
Microsoft has released a security update addressing a critical vulnerability in Microsoft Edge that could allow remote attackers to execute arbitrary code on vulnerable systems. Tracked as CVE-2026-45495 and reported by Orange Tsai of DEVCORE, the flaw carries a CVSS v3 score of 7.5 and requires user interaction, for example, visiting a malicious webpage or […]
The post Microsoft Edge Vulnerability Allows Remote Attackers to Execute Arbitrary Code appeared first on Cyber Security News.
除了 AI Siri 和库克「谢幕演讲」,今年 WWDC 还有什么?
Ссылка на GitHub, а внутри — вредонос. Мошенники превратили поиск бесплатных программ в настоящую пытку
Most pros have seen AI hallucinations in IT operations
Autonomous AI is taking action inside enterprise IT environments. Software is restarting services, isolating risky devices, and applying patches without waiting for a human to approve the step. The capability is spreading at the same time IT professionals are reporting frequent encounters with AI output errors that can carry operational impact. Ivanti’s 2026 AI Maturity Report, drawn from responses by 1,500 IT professionals across six countries, finds that 68% have personally seen AI produce hallucinations … More →
The post Most pros have seen AI hallucinations in IT operations appeared first on Help Net Security.
中国间谍利用领英引诱西方人分享敏感信息
🚀 终极终端:iTerm2 + Oh My Zsh 生产力榨干指南
Квантовая теория гравитации не работала полвека. Физики нашли недостающий элемент — и он называется «магия»
Dashlane Details How Hackers Managed to Download Encrypted Password Vaults
Dashlane has disclosed that threat actors successfully brute-forced two-factor authentication (2FA) protections to register unauthorized devices and download encrypted password vaults belonging to fewer than 20 personal plan users, with a completed investigation confirming no broader impact on its internal systems. Beginning Sunday, May 31, 2026, an external threat actor launched a high-volume brute-force campaign […]
The post Dashlane Details How Hackers Managed to Download Encrypted Password Vaults appeared first on Cyber Security News.
Meta借鉴特斯拉在帐篷里建造数据中心
New infosec products of the week: June 5, 2026
Here’s a look at the most interesting products from the past week, featuring releases from Asimily, depthfirst, Diligent, Hyland, MazeBolt, and Noma. Asimily turns device risk into automated network policy Asimily has launched Segmentation Orchestration, enabling connected-device risk intelligence to flow directly into enforceable network policy without manual translation. No other platform combines full asset visibility, vulnerability prioritization, and segmentation orchestration in a single system. Hyland platform innovations focus on AI governance, context, and agent … More →
The post New infosec products of the week: June 5, 2026 appeared first on Help Net Security.