Aggregator

The West African country advanced rules to force organizations to disclose cyberattacks, joining other nations in a shift to mandated transparency.

A vulnerability described as critical has been identified in MetaGuru HCM up to 7.5.2. Affected is an unknown function. Such manipulation leads to sql injection. This vulnerability is uniquely identified as CVE-2026-15804. The attack can be launched remotely. No exploit exists.

A vulnerability marked as problematic has been reported in Grafana MCP Server up to 0.17.1. This impacts an unknown function of the component URL Handler. This manipulation of the argument X-Grafana-URL causes server-side request forgery. This vulnerability is handled as CVE-2026-15583. The attack can be initiated remotely. There is not any exploit available.

A vulnerability labeled as problematic has been found in Red Hat OpenShift GitOps. This affects an unknown function of the component ClusterRole Reconciler. The manipulation of the argument Name results in denial of service. This vulnerability is known as CVE-2026-14251. It is possible to launch the attack remotely. No exploit is available.

本周，互联网网络安全态势整体评价为良。

360“破阵子”服务金融、政府等百余家机构 AI渗透测试能力实现规模化落地

Fortinet has announced new capabilities for its unified endpoint platform, FortiEndpoint, designed to help organizations securely adopt AI, protect sensitive data, and reduce risk. By bringing AI visibility and control, native data security, endpoint risk scoring, and FortiAI-assisted operations into FortiEndpoint, Fortinet enables security teams to better govern AI usage, reduce sensitive data exposure, enforce risk-aware access, and simplify security operations across distributed environments. “Organizations need a simpler and more effective way to manage security … More →

The post Fortinet adds AI controls and data loss prevention to FortiEndpoint appeared first on Help Net Security.

U.S. federal prosecutors have unsealed charges against three Russian nationals, accusing them of providing bulletproof hosting (BPH) services to ransomware gangs that caused over $62 million in damages to victims worldwide. [...]

特朗普政府“金鹰计划”以AI赋能网络安全漏洞发现与修复

数字监控技术已成为国家安全严重威胁

微软在本周二释出了 7 月例行安全更新，修复了创纪录的 570 个漏洞。微软将补丁数量的激增归于 AI 辅助的漏洞发现。其中近 60 个 Bug 的风险等级归类为高危级。微软还修复了 3 个 0day，其中 2 个正被利用。2 个被利用的 0day 都是提权漏洞，包括 CVE-2026-56155 和 CVE-2026-56164。第三个 0day 则能绕过 Windows BitLocker 的安全功能，微软表示尚未发现该漏洞被利用。

Разбираемся, что нужно обновить прямо сейчас.

Trust Chain is an AI-native third-party risk management (TPRM) solution by Strike Graph that replaces the security questionnaire model with validated evidence of compliance. Rather than asking vendors to self-report their security posture, Trust Chain requires vendors to submit evidence, which is then evaluated using Strike Graph’s patent-pending Verify AI technology. The evaluation tests each submission against the requesting organization’s specific requirements. The result is verified assurance rather than vendor attestation, delivered in a fraction … More →

The post Product showcase: Trust Chain TPRM turns vendor compliance evidence into verified assurance appeared first on Help Net Security.

Apple-focused scam operations are increasingly using FaceTime as a high-trust social-engineering channel to steal credentials and, in higher-risk cases, prepare victims for device compromise. Apple said threat actors may approach targets via phone calls, FaceTime, SMS, email, and other communications, posing as a legitimate organization. The company stressed that users should never disclose passwords, verification […]

The post FaceTime Scammers Combine Credential Theft, Remote-Access Apps, and iOS Exploits for Device Takeover. appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Может ли антидетект выглядеть как обычный браузер.

从尤里·加加林开始，宇航员进入太空已有 65 年历史，如今他们首次在太空中完成了诊断质量的 X 光照射。在这之前空间站上唯一可用的医学成像技术是超声波。X 射线是现代医学最强大的诊断工具之一，因为它速度快、精度高，不到一分钟就能确诊疑似骨折。2025 年发射的 Fram2 私人太空任务携带了一台便携式 X 光系统，宇航员在太空飞行期间拍摄了身体的 X 光照片。在太空拍摄 X 光照片的难点是如何定位患者、侦测器和 X 射线源，以及保持静止足够长时间以获得清晰的图像。手和手臂是最容易成像的身体部位，因为很容易保持静止。胸部、腹部和盆腔的成像难度更大，但其图像仍然足以进行诊断。

Ни одна инфракрасная камера не засечёт вас, если вы облачитесь в это чудо инженерной мысли.

Microsoft has addressed multiple information-disclosure vulnerabilities in the Windows Remote Desktop Protocol (RDP). This widely used service enables remote administration and access to Windows systems. The five flaws could permit attackers to retrieve information from vulnerable hosts, potentially exposing data held in application memory during an RDP session. Microsoft Fixes Multiple Windows RDP Flaws All […]

The post Microsoft Fixes Multiple Windows RDP Flaws Exposing Sensitive Data Over the Network appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Подозрительный код отныне сам выдаёт заложенные в него возможности.

26 名 Meta 员工提起诉讼，指控社交巨人利用 AI 驱动的评分和监控系统筛选裁员对象，并且特别针对了休病假、家庭事务假、产假或育儿假的员工。这起诉讼被认为是美国首例针对科技巨头在裁员中使用 AI 的案例。诉讼指控，Meta 不是通过熟悉员工的中层经理制定裁员名单，而是使用了一系列内部 AI 系统。其中一种评分标准是员工使用 AI 工具的频率。Meta 内部系统会据此将员工分类为——AI Native、AI First 和 AI Enabled。诉讼称，Meta 的系统没有考虑到残疾员工以及休假员工所产生的差异，导致残疾和休假员工更高比例的进入裁员名单。Meta 回应称指控缺乏依据，称它的裁员决定是由人类而不是 AI 做出的。