Aggregator

SAP has addressed 16 vulnerabilities across multiple products as part of its July 2026 security updates, including three critical flaws in NetWeaver, Commerce Cloud, and AppRouter. [...]

AI security agents are starting to influence real security decisions. They summarize findings, prioritize remediation, recommend next steps, and help teams move faster. But most still rely on fragmented risk signals: scanner output, severity scores, threat intelligence, configuration findings, and exposure data. That fragmentation matters because attackers do not move through environments one

В ZEGO заявили, что банкротство стало вынужденным решением.

Security Operations Centers (SOCs) often encounter challenges that go beyond just managing alert volume. Each alert necessitates that analysts validate indicators, investigate behaviors, assess scope, decide on escalation paths, and create detections to prevent future occurrences. When these tasks rely on separate tools, crucial evidence can be lost during transitions, leading analysts to enrich the […]

The post ANY.RUN Integrates Threat Intelligence and Interactive Sandbox to Streamline SOC Workflows appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

At least two distinct threat actors are weaponizing a novel evasion technique called OAuth client ID spoofing in cloud campaigns, while slipping past telemetry. The activity allows users to enumerate user accounts and validate stolen credentials in Microsoft Entra ID environments, without ever generating a successful sign-in event that would otherwise alert defenders. And bad actors have begun

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2008-4128, a cross-site request forgery (CSRF) vulnerability affecting Cisco IOS, to its Known Exploited Vulnerabilities (KEV) Catalog. The vulnerability was officially listed on July 13, 2026, with a remediation deadline of July 16, 2026, for Federal Civilian Executive Branch agencies. Although this vulnerability dates back […]

The post CISA Adds Cisco IOS CSRF Flaw Enabling Arbitrary Command Execution to KEV Catalog appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Эксперимент показал, как языковые модели снижают стоимость и сложность модификации мобильного кода.

关键词MemGhost攻击你有没有想过，如果有人能偷偷改写你AI助手的"记忆"，会发生什么？

关键词AI你用AI编程助手写代码的时候，有没有想过一个问题：它到底把你的代码传到了哪里？

关键词Telegram今天，全球数亿Telegram用户发现一个问题：所有t.me短链接全部打不开了。

Microsoft is now testing a cleaner and faster version of Windows Search that should prioritize relevant results over ads and promotional content. [...]

Submit #856290 / VDB-165082

Submit #856171 / VDB-378291

Submit #856170 / VDB-378291

Google has started rolling out FIDO2-compliant physical security key support as a second factor for authentication in Google Credential Provider for Windows (GCPW) to all Google Workspace customers. GCPW is a free tool that lets users sign in to Windows computers with their Google Workspace account instead of, or alongside, a Windows username and password. The update allows organizations to strengthen account security by enabling administrators to enforce 2-step verification (2SV) with hardware security keys … More →

The post Google adds FIDO2 keys and phone passkeys to Windows login via GCPW appeared first on Help Net Security.

IDC 的数据显示，2026 年第二季度，中国智能手机出货量约为 6600 万部，同比下降 4.3%，连续第五个季度下滑。内存等组件成本上涨迫使大多数 Android 厂商提价，从而导致需求降温。华为和苹果是例外，分别实现了近 20% 和 25% 的增长。华为市场份额最高占 22.6%，其次是苹果的 18.1%，OPPO 16.0%，vivo 16.0%，小米 12.4% ，荣耀 11.3%，Wiko 1.1%，联想 0.3%，中兴 0.3% 以及三星 0.1%。由于涨价 618 期间智能手机销量同比下降近 15%。相比其它涨价的 Android 厂商，华为和苹果则能维持价格的稳定。

登录 注册

Подрядчику, опубликовавшему секретные данные, закрыли доступ.

The vast majority of UEFI computers carry a Microsoft certificate that will trust a small first-stage loader called a shim, a program Microsoft signs so that Linux and assorted boot tools can run with Secure Boot on. Eleven of those signed shims turned out to be old enough to undo the protection they were meant to support. ESET researchers found the vulnerable versions, all at 0.9 or below, and Microsoft revoked them in its June … More →

The post No one knows how many old shims can still bypass UEFI Secure Boot appeared first on Help Net Security.